mail.ucunorthern.org.uk
Issued by R3
About this certificate
This digital certificate with serial number 04:63:81:e9:e0:3d:4e:b2:a5:26:f0:ac:a5:f6:54:20:1b:6a was issued on by Let's Encrypt.
With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=mail.ucunorthern.org.uk
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:63:81:e9:e0:3d:4e:b2:a5:26:f0:ac:a5:f6:54:20:1b:6aSerial Number (int): 382309782816955212162626767106075585944426
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 6e:2c:77:8a:7b:88:b1:0e:36:57:5f:ca:27:2f:88:81:f0:12:c1:44
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 5a:2c:51:e9:d8:71:e3:17:c6:50:89:1b:0c:db:5c:eb:26:5f:98:55
Fingerprint (sha256): b7:bb:70:d2:4f:15:73:51:20:50:b2:31:93:4c:42:77:76:72:86:40:56:bd:6c:b0:93:f2:28:15:65:21:f6:4f
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate mail.ucunorthern.org.uk
20
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mail.ucunorthern.org.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.climatelearningresources.org.uk
*.lovefe.org.uk
*.web.ucu.org.uk
*.worcucu.org.uk
climatelearningresources.org.uk
cpanel.ucunorthern.org.uk
cpcalendars.ucunorthern.org.uk
cpcontacts.ucunorthern.org.uk
lovefe.org.uk
lovefe.org.uk.web.ucu.org.uk
mail.ucunorthern.org.uk
ucunorthern.org.uk
webdisk.ucunorthern.org.uk
webmail.ucunorthern.org.uk
worcucu.org.uk
www.ctlw.web.ucu.org.uk
www.lovefe.org.uk.web.ucu.org.uk
www.ucunorthern.org.uk
www.ucunorthern.web.ucu.org.uk
www.uw.web.ucu.org.uk
*.lovefe.org.uk
*.web.ucu.org.uk
*.worcucu.org.uk
climatelearningresources.org.uk
cpanel.ucunorthern.org.uk
cpcalendars.ucunorthern.org.uk
cpcontacts.ucunorthern.org.uk
lovefe.org.uk
lovefe.org.uk.web.ucu.org.uk
mail.ucunorthern.org.uk
ucunorthern.org.uk
webdisk.ucunorthern.org.uk
webmail.ucunorthern.org.uk
worcucu.org.uk
www.ctlw.web.ucu.org.uk
www.lovefe.org.uk.web.ucu.org.uk
www.ucunorthern.org.uk
www.ucunorthern.web.ucu.org.uk
www.uw.web.ucu.org.uk
Other certificates including the domain name ucunorthern.org.uk
(limited to 100 certificates)
ucunorthern.org.uk
ucunorthern.org.uk
webdisk.ucunorthern.org.uk
*.web.ucu.org.uk
ucunorthern.org.uk
ucunorthern.org.uk
ultratileadhesives.co.uk
ucunorthern.org.uk
ucunorthern.org.uk
ucunorthern.org.uk
ucunorthern.org.uk
mail.ucunorthern.org.uk
ucunorthern.org.uk
ucunorthern.org.uk
ucunorthern.org.uk
ucunorthern.org.uk
ucunorthern.org.uk
webdisk.ucunorthern.org.uk
*.web.ucu.org.uk
ucunorthern.org.uk
ucunorthern.org.uk
ultratileadhesives.co.uk
ucunorthern.org.uk
ucunorthern.org.uk
ucunorthern.org.uk
ucunorthern.org.uk
mail.ucunorthern.org.uk
ucunorthern.org.uk
ucunorthern.org.uk
ucunorthern.org.uk
ucunorthern.org.uk
Certificate
The complete raw certificate details for mail.ucunorthern.org.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG5jCCBc6gAwIBAgISBGOB6eA9TrKlJvCspfZUIBtqMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMjMxMjQwMjBaFw0yNDA1MjMxMjQwMTlaMCIxIDAeBgNVBAMT F21haWwudWN1bm9ydGhlcm4ub3JnLnVrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEA2C+AvtrQdAg5tqxXGzePI63BU5vzKCWl4M1n3/7DfZcZsOejcSef s7sOaBAVGD/tUlZFyVh2bmjzW6l8F7dZusRj5KDaY6FMBHr3RPXKUCcEEFV296hK q9VeqfZ3nV955t6pwAQ59dJpqR4+wWrTUJnoHItCzwyx12o53Z5Wui0N/YeH1Hxu 39PEg4SRoDdO/HT7rcXV+upXaTMYVCHzewVzUnzb4RCVjPqLHqgoHO0rvVAzuNnH zUUcTuLVpmfFCL1Kj2KRaeSdgTUSLMNHBYikMKskbTe5NHbUZdr/rVp5zooTu77W gZsRGYAOduJ3oA+S5xDZTIaYLMjKDCBsHQIDAQABo4IEBDCCBAAwDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8E AjAAMB0GA1UdDgQWBBRuLHeKe4ixDjZXX8onL4iB8BLBRDAfBgNVHSMEGDAWgBQU LrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGG FWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmku bGVuY3Iub3JnLzCCAgwGA1UdEQSCAgMwggH/giEqLmNsaW1hdGVsZWFybmluZ3Jl c291cmNlcy5vcmcudWuCDyoubG92ZWZlLm9yZy51a4IQKi53ZWIudWN1Lm9yZy51 a4IQKi53b3JjdWN1Lm9yZy51a4IfY2xpbWF0ZWxlYXJuaW5ncmVzb3VyY2VzLm9y Zy51a4IZY3BhbmVsLnVjdW5vcnRoZXJuLm9yZy51a4IeY3BjYWxlbmRhcnMudWN1 bm9ydGhlcm4ub3JnLnVrgh1jcGNvbnRhY3RzLnVjdW5vcnRoZXJuLm9yZy51a4IN bG92ZWZlLm9yZy51a4IcbG92ZWZlLm9yZy51ay53ZWIudWN1Lm9yZy51a4IXbWFp bC51Y3Vub3J0aGVybi5vcmcudWuCEnVjdW5vcnRoZXJuLm9yZy51a4Iad2ViZGlz ay51Y3Vub3J0aGVybi5vcmcudWuCGndlYm1haWwudWN1bm9ydGhlcm4ub3JnLnVr gg53b3JjdWN1Lm9yZy51a4IXd3d3LmN0bHcud2ViLnVjdS5vcmcudWuCIHd3dy5s b3ZlZmUub3JnLnVrLndlYi51Y3Uub3JnLnVrghZ3d3cudWN1bm9ydGhlcm4ub3Jn LnVrgh53d3cudWN1bm9ydGhlcm4ud2ViLnVjdS5vcmcudWuCFXd3dy51dy53ZWIu dWN1Lm9yZy51azATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIE gfQEgfEA7wB2AKLiv9Ye3i8vB6DWTm03p9xlQ7DGtS6i2reK+Jpt9RfYAAABjdYy C3YAAAQDAEcwRQIgUY31rQg2mmyvGOj+7KJyNvkWvuq5Sb+O18tzjELL5sMCIQCU pOGoLQmCCMKA2LphOrcPKeFP7UkDVFDjEw4VTwtRdgB1AHb/iD8KtvuVUcJhzPWH ujS0pM27KdxoQgqf5mdMWjp0AAABjdYyC9IAAAQDAEYwRAIgEB42Iep73ep1cgJh H31OylJkYTGJ8Xb/Hk0jeGU3V1oCICcyYfl+ri9tj8bEjpgzW4O/XCnb9c1eDgOt mPwtd9l3MA0GCSqGSIb3DQEBCwUAA4IBAQB2RruOYBrDNa84ChXOVKIIFuGtmYZ4 tXQgttySGzcCj3IYz7ldrYkcH+NwyILeHep/lsv4b1i7KRSyy68HhmxMr7hudsSQ 0vCck9nvDAumed5enGmst4S/KNEVT8zNzeJzKLXb0dY24r2+v2T0ro3S1lzB20y4 znqVTrAveo1GnAVgpnXCMiYbEdZYPhoSxRkZOTP5ranK2+5CGGwHlv1tV+/kFcxD aR5VhUoYoarbwCvNRMQSbR55Th5/GYOrbagrLRlxs3eP+7OIofXXzSLdvW0wmQdL IUfGh0bESAKQJIccPoZnPmz1e+M6b1HPhqSjt9iEbXCyueKxiz/azM39 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2C+AvtrQdAg5tqxXGzeP I63BU5vzKCWl4M1n3/7DfZcZsOejcSefs7sOaBAVGD/tUlZFyVh2bmjzW6l8F7dZ usRj5KDaY6FMBHr3RPXKUCcEEFV296hKq9VeqfZ3nV955t6pwAQ59dJpqR4+wWrT UJnoHItCzwyx12o53Z5Wui0N/YeH1Hxu39PEg4SRoDdO/HT7rcXV+upXaTMYVCHz ewVzUnzb4RCVjPqLHqgoHO0rvVAzuNnHzUUcTuLVpmfFCL1Kj2KRaeSdgTUSLMNH BYikMKskbTe5NHbUZdr/rVp5zooTu77WgZsRGYAOduJ3oA+S5xDZTIaYLMjKDCBs HQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 382309782816955212162626767106075585944426 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-23 12:40:20 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-23 12:40:19 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.ucunorthern.org.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27290898431725804174514850595283921377830496447149697840713372963656928046576298583094501783243966948939547138932610796582935495835812459015551006728403813386018762677577010556242770267021029922667615909933104725894541585575183271212849856221322280638397475903013617321725621088738474650328486333853337481887493461376586555647804069587315151811689532027236480655831545035253214807658183470243459204473204375757194355845373210313641741834660515324545312760530240235186096151752346043511760178935173880952084136275632796564137111193788607421650666539303071508938617279280659761664621049825865345614814546791855739137053 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6e2c778a7b88b10e36575fca272f8881f012c144 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (515 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.climatelearningresources.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lovefe.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.web.ucu.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worcucu.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'climatelearningresources.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.ucunorthern.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.ucunorthern.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.ucunorthern.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovefe.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lovefe.org.uk.web.ucu.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ucunorthern.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucunorthern.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.ucunorthern.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.ucunorthern.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worcucu.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctlw.web.ucu.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lovefe.org.uk.web.ucu.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ucunorthern.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ucunorthern.web.ucu.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uw.web.ucu.org.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018dd6320b7600000403004730450220518df5ad08369a6caf18e8feeca27236f916beeab949bf8ed7cb738c42cbe6c302210094a4e1a82d098208c280d8ba613ab70f29e14fed49035450e3130e154f0b517600750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018dd6320bd200000403004630440220101e3621ea7bddea757202611f7d4eca5264613189f176ff1e4d23786537575a0220273261f97eae2f6d8fc6c48e98335b83bf5c29dbf5cd5e0e03ad98fc2d77d977 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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