subcontractor.shape.com.au

Issued by R3

About this certificate

This digital certificate with serial number 03:28:3f:9b:04:6d:f3:d9:94:97:fb:31:0e:ed:06:7a:bb:24 was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=subcontractor.shape.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:28:3f:9b:04:6d:f3:d9:94:97:fb:31:0e:ed:06:7a:bb:24
Serial Number (int): 275032698731706777101346780680939925846820
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0e:52:e9:38:9c:ec:1c:d9:67:d1:25:40:48:14:5a:04:9c:a8:fa:eb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 88:ea:82:7b:7b:a8:09:02:10:68:a9:b4:de:8a:45:cf:90:f3:f1:04
Fingerprint (sha256): b5:a3:df:53:87:3c:99:76:bc:55:1e:42:d2:d2:8d:3f:85:94:20:7d:bb:1d:d9:78:25:3d:52:f4:b8:f8:43:b5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate subcontractor.shape.com.au

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for subcontractor.shape.com.au

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bot.shape.com.au
redirect.shape.com.au
redirect.shapegroup.com.au
resource.shape.com.au
resource.shapegroup.com.au
shapegroup.com.au
subcontractor.shape.com.au
subcontractor.shapegroup.com.au
webhook.shape.com.au
webservices.shape.com.au
webservices.shapegroup.com.au
www.experiencebetter.shape.com.au
www.resource.shape.com.au
www.shapegroup.com.au

Other certificates including the domain name shape.com.au

(limited to 100 certificates)
www.financesharedservices.navitas.com
shape.com.au
prod.8.slot.cdn.salesforce-communities.com
akamaisecure6.qualtrics.com
prod.8.slot.cdn.salesforce-communities.com
email.shape.com.au
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
subcontractor.shape.com.au
shape.com.au
prod.8.slot.cdn.salesforce-communities.com
email.shape.com.au
prod.8.slot.cdn.salesforce-communities.com
123.shape.com.au
helpdesk.nswbar.asn.au
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
akamaisecure6.qualtrics.com
servicedesk.stjamescollege.qld.edu.au
helpdesk.arn.com.au
prod.8.slot.cdn.salesforce-communities.com
akamaisecure6.qualtrics.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
akamaisecure6.qualtrics.com
prod.8.slot.cdn.salesforce-communities.com
helpdesk.arn.com.au
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
servicedesk.atsichsbrisbane.org.au
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
shape.com.au
prod.8.slot.cdn.salesforce-communities.com
shape.com.au
*.shape.com.au
akamaisecure6.qualtrics.com
services.navitas.com
shape.com.au
prod.8.slot.cdn.salesforce-communities.com
subcontractor.shape.com.au
prod.8.slot.cdn.salesforce-communities.com
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
email.shape.com.au
email.shape.com.au
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
shape.com.au
prod.8.slot.cdn.salesforce-communities.com
www.financeservices.navitas.com
*.shape.com.au
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
akamaisecure6.qualtrics.com
prod.8.slot.cdn.salesforce-communities.com
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
akamaisecure6.qualtrics.com
prod.8.slot.cdn.salesforce-communities.com
akamaisecure6.qualtrics.com
prod.8.slot.cdn.salesforce-communities.com
subcontractor.shape.com.au
akamaisecure6.qualtrics.com
mail.shape.com.au
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
email.shape.com.au
prod.8.slot.cdn.salesforce-communities.com
email.shape.com.au
prod.8.slot.cdn.salesforce-communities.com
akamaisecure6.qualtrics.com
subcontractor.shape.com.au
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
akamaisecure6.qualtrics.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
subcontractor.shape.com.au
email.shape.com.au
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com
email.shape.com.au
prod.8.slot.cdn.salesforce-communities.com
prod.8.slot.cdn.salesforce-communities.com

Certificate

The complete raw certificate details for subcontractor.shape.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG2TCCBcGgAwIBAgISAyg/mwRt89mUl/sxDu0GerskMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMTgyMTAyMzdaFw0yNDAyMTYyMTAyMzZaMCUxIzAhBgNVBAMT
GnN1YmNvbnRyYWN0b3Iuc2hhcGUuY29tLmF1MIIBojANBgkqhkiG9w0BAQEFAAOC
AY8AMIIBigKCAYEAx5Bk2h3SjM3ecnWd8bQp/ahIUjHQRe3KVriaTDy4u4zd0rzT
3KAn6mP7yGRAMaxj7wbaYCY0QTcerxkYQVWVXxVl5Q4G1fn5MGImRBPExOII9+XA
26mUfZp6cDj8FlXsuzSXavcIW9dOnNlSieuw7OiISjUmCjpit0H+SrI4IWHJKxx9
pb08JOGk1Sf7Xoy9p87Rlouun+bXH6rPqXAbyZM9o39liK6jBCRvzlRoc+L7dvhN
KMwacG7DXxes9b8oPRrruWu5VbSYOdSfG3t/suAiVEZP/tJ2ggC/rj+wHp5gngpe
ELRtrxlEER4hMf1h0eWD/Y3DDr83zsiNWj5w7z0GFCXLG8R+llogRNQVL190Dwzb
54j2S+dNC7Q030Z4DjqEhsd+t4F4QyJLyiNVZsLT+DnhJx9AeCyjalQbgfNRTatn
62ZLqm4Pfttus1bZbEwUXkCNA+kdl54TlojQueCCsYsRtQp/7jmSVc36+j0iWkVT
AS5MngVizdbaJmk/AgMBAAGjggN0MIIDcDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FA5S6Tic7BzZZ9ElQEgUWgScqPrrMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYf
r52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8u
bGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIB
eQYDVR0RBIIBcDCCAWyCEGJvdC5zaGFwZS5jb20uYXWCFXJlZGlyZWN0LnNoYXBl
LmNvbS5hdYIacmVkaXJlY3Quc2hhcGVncm91cC5jb20uYXWCFXJlc291cmNlLnNo
YXBlLmNvbS5hdYIacmVzb3VyY2Uuc2hhcGVncm91cC5jb20uYXWCEXNoYXBlZ3Jv
dXAuY29tLmF1ghpzdWJjb250cmFjdG9yLnNoYXBlLmNvbS5hdYIfc3ViY29udHJh
Y3Rvci5zaGFwZWdyb3VwLmNvbS5hdYIUd2ViaG9vay5zaGFwZS5jb20uYXWCGHdl
YnNlcnZpY2VzLnNoYXBlLmNvbS5hdYIdd2Vic2VydmljZXMuc2hhcGVncm91cC5j
b20uYXWCIXd3dy5leHBlcmllbmNlYmV0dGVyLnNoYXBlLmNvbS5hdYIZd3d3LnJl
c291cmNlLnNoYXBlLmNvbS5hdYIVd3d3LnNoYXBlZ3JvdXAuY29tLmF1MBMGA1Ud
IAQMMAowCAYGZ4EMAQIBMIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcASLDja9qm
RzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGL5HUL3gAABAMASDBGAiEAyx1o
WCFU51CJL0CGJfszJNqTpdn8yDOVgZuG7jIm8aECIQCP1+7wYXHVt5iKvyI+ZHmz
s0zVgJcImswLnofWufWxUQB3AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdM
Wjp0AAABi+R1DJ8AAAQDAEgwRgIhAOir2+U+hPWUOqXHubICDr59QEihEpvgr9IP
Aj9G1kvGAiEA31TRHjwXZpr+M4q+XK25rQuCUn0NpcnvEsa0Odt5I5swDQYJKoZI
hvcNAQELBQADggEBABNRPsPPtPPdAZZK2CCSbrOo18ty7Ie4ZKQH17X2xhqhhPjT
sa7MXucS8qVBqb4QbfUvFbIo9kXBiU3YFj1v8vRvrFxAQX2x0fm/QyObAlSnpugS
HIb3y8NMqQBXZYZflzkgZ/y0jwQKYrdxwOCLAbj58QSN6QcGVeVe+swuU10AAeV9
cRCCtnXCrx4SzukMixT5/XQKiA2o2WsZlq7/YmnxgFazyp8RdlAr7WbNWzluRQvC
UG+14MrvVh9Tn9kRo1jlocX599LgnKjXRa5bqKG9nisYSlE9AzpjoU4+OmBwy2JO
RruWpywbiE2TgotOTJbWpu9oFBt7J13aGbS/RQU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAx5Bk2h3SjM3ecnWd8bQp
/ahIUjHQRe3KVriaTDy4u4zd0rzT3KAn6mP7yGRAMaxj7wbaYCY0QTcerxkYQVWV
XxVl5Q4G1fn5MGImRBPExOII9+XA26mUfZp6cDj8FlXsuzSXavcIW9dOnNlSieuw
7OiISjUmCjpit0H+SrI4IWHJKxx9pb08JOGk1Sf7Xoy9p87Rlouun+bXH6rPqXAb
yZM9o39liK6jBCRvzlRoc+L7dvhNKMwacG7DXxes9b8oPRrruWu5VbSYOdSfG3t/
suAiVEZP/tJ2ggC/rj+wHp5gngpeELRtrxlEER4hMf1h0eWD/Y3DDr83zsiNWj5w
7z0GFCXLG8R+llogRNQVL190Dwzb54j2S+dNC7Q030Z4DjqEhsd+t4F4QyJLyiNV
ZsLT+DnhJx9AeCyjalQbgfNRTatn62ZLqm4Pfttus1bZbEwUXkCNA+kdl54TlojQ
ueCCsYsRtQp/7jmSVc36+j0iWkVTAS5MngVizdbaJmk/AgMBAAE=
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275032698731706777101346780680939925846820
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-18 21:02:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-16 21:02:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'subcontractor.shape.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4528861080998164265564446213377020492926577647245635243102585053717978521040411710897479051393705961487685121165706731750352197427306733472814922733092329562237989043574814730260857333631898005020918863198319218050128462852101851156880673577219171260243444786644593832797184133302918087643662624788575667655414479287473628231688787749632732506787740432059357148178500553936204917480632855309281020635129583857991253745998865840445711940132078720391701014635595421632150717384914107889749722889391435019348119433151074949570713197730600393142282428467022668915991744024786472576540025244804320113189093294395562604646125790149106354328151044423212382406157138809456584633960342717612650233852991706348353672871835229834534180758417985028030206579370684166907331876213848872616134341257809042417301213709333538660346078958797860370506841182034841524490135827763736098763697032270083049880969887411681294595162309758864037669183
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0e52e9389cec1cd967d1254048145a049ca8faeb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bot.shape.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redirect.shape.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redirect.shapegroup.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resource.shape.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resource.shapegroup.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shapegroup.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subcontractor.shape.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subcontractor.shapegroup.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webhook.shape.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webservices.shape.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webservices.shapegroup.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.experiencebetter.shape.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resource.shape.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shapegroup.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018be4750bde0000040300483046022100cb1d68582154e750892f408625fb3324da93a5d9fcc83395819b86ee3226f1a10221008fd7eef06171d5b7988abf223e6479b3b34cd58097089acc0b9e87d6b9f5b15100770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018be4750c9f0000040300483046022100e8abdbe53e84f5943aa5c7b9b2020ebe7d4048a1129be0afd20f023f46d64bc6022100df54d11e3c17669afe338abe5cadb9ad0b82527d0da5c9ef12c6b439db79239b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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