stiffmagazine.com

Issued by R3

About this certificate

This digital certificate with serial number 04:cb:cc:52:2f:3d:b8:5f:8b:1c:98:a0:02:49:5a:b9:5e:62 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=stiffmagazine.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:cb:cc:52:2f:3d:b8:5f:8b:1c:98:a0:02:49:5a:b9:5e:62
Serial Number (int): 417798053449637247395193632606668398878306
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 37:72:b8:8f:37:d7:07:ff:01:ca:ff:5a:c1:f1:87:74:30:2d:9d:c2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 47:a4:03:24:96:66:e3:af:54:e8:3c:df:95:a2:4c:9e:49:6c:17:36
Fingerprint (sha256): b9:af:32:c3:a5:17:5d:4a:7b:01:2c:db:83:a0:3e:9e:56:3c:2e:70:a2:3e:58:6b:0b:75:b7:57:fd:70:e6:71

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate stiffmagazine.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stiffmagazine.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

airlock-bound.com
boatmanbeeing.com
cryptocrate.org
daventure.com
klimaoase.com
logodecorating.com
rumi.one
segwaymoped.com
stemcellfortwayne.com
stiffmagazine.com
tcl.life
thezookeepersband.com
totallyfreshface.com
vvendelighting.com
wateranalysistesting.com
www.airlock-bound.com
www.boatmanbeeing.com
www.cryptocrate.org
www.daventure.com
www.klimaoase.com
www.logodecorating.com
www.rumi.one
www.segwaymoped.com
www.stemcellfortwayne.com
www.stiffmagazine.com
www.tcl.life
www.thezookeepersband.com
www.totallyfreshface.com
www.vvendelighting.com
www.wateranalysistesting.com

Other certificates including the domain name stiffmagazine.com

(limited to 100 certificates)
stiffmagazine.com
gdosuzpamuk.com

Certificate

The complete raw certificate details for stiffmagazine.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgISBMvMUi89uF+LHJigAklauV5iMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA1MTQxNTQ5NTVaFw0yNDA4MTIxNTQ5NTRaMBwxGjAYBgNVBAMT
EXN0aWZmbWFnYXppbmUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsrgJfrqvIH49aHMmzbU671c1ENqMpAW4AW4oFQwO0Z4+e/u3+kx/lSQ1eSgA
t30EnzSI42jsH3gzIyMYy5cARrM0WD/41z7qI6CF69DlI0xSRNz9CxwziqSH0slw
QgW14BxsT+070ZPHaGX3xUL16i1+8RMLJuSbS6dUzOq8RxqJX4YgpLx9GMmzf59h
SBvfa6GyGz326C/9tapBdcnXe5F29HIiyrEhI4xcmxDo1zGVZOKSW6ko0MYkdZp2
x1RhPcwNM8jwqdBWy8Ks52+nJ46KFTm0XJco6g7n+TZJkj/40C2WyaNqPBX5QZeE
k74QmoYUuGOYXJGh/hUilEw4BwIDAQABo4IEaTCCBGUwDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G
A1UdDgQWBBQ3criPN9cH/wHK/1rB8Yd0MC2dwjAfBgNVHSMEGDAWgBQULrMXt1hW
y65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6
Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iu
b3JnLzCCAm8GA1UdEQSCAmYwggJighFhaXJsb2NrLWJvdW5kLmNvbYIRYm9hdG1h
bmJlZWluZy5jb22CD2NyeXB0b2NyYXRlLm9yZ4INZGF2ZW50dXJlLmNvbYINa2xp
bWFvYXNlLmNvbYISbG9nb2RlY29yYXRpbmcuY29tgghydW1pLm9uZYIPc2Vnd2F5
bW9wZWQuY29tghVzdGVtY2VsbGZvcnR3YXluZS5jb22CEXN0aWZmbWFnYXppbmUu
Y29tggh0Y2wubGlmZYIVdGhlem9va2VlcGVyc2JhbmQuY29tghR0b3RhbGx5ZnJl
c2hmYWNlLmNvbYISdnZlbmRlbGlnaHRpbmcuY29tghh3YXRlcmFuYWx5c2lzdGVz
dGluZy5jb22CFXd3dy5haXJsb2NrLWJvdW5kLmNvbYIVd3d3LmJvYXRtYW5iZWVp
bmcuY29tghN3d3cuY3J5cHRvY3JhdGUub3JnghF3d3cuZGF2ZW50dXJlLmNvbYIR
d3d3LmtsaW1hb2FzZS5jb22CFnd3dy5sb2dvZGVjb3JhdGluZy5jb22CDHd3dy5y
dW1pLm9uZYITd3d3LnNlZ3dheW1vcGVkLmNvbYIZd3d3LnN0ZW1jZWxsZm9ydHdh
eW5lLmNvbYIVd3d3LnN0aWZmbWFnYXppbmUuY29tggx3d3cudGNsLmxpZmWCGXd3
dy50aGV6b29rZWVwZXJzYmFuZC5jb22CGHd3dy50b3RhbGx5ZnJlc2hmYWNlLmNv
bYIWd3d3LnZ2ZW5kZWxpZ2h0aW5nLmNvbYIcd3d3LndhdGVyYW5hbHlzaXN0ZXN0
aW5nLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIEgfYE
gfMA8QB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABj3gCujoA
AAQDAEgwRgIhAN1b9Zv38D9BysSnTc0qD1WYmXini8ds6QVgW9MMitM3AiEAnPa3
ZZZqqO7HpoIXGPCSy3pRIyuWL8IKOnLZvKyw8VUAdgDf4VbrqgWvtZwPhnGNqMAy
Tq5W2W6n9aVqAdHBO75SXAAAAY94Arr4AAAEAwBHMEUCIHdprBcu1HA4ofjs7M1K
C7WSFlGo15F1EDUnctIEUauoAiEA4zIoLRzbrjdAAQxaVuVKWTSD6WI5F/sKzkpj
94WEOSIwDQYJKoZIhvcNAQELBQADggEBAKkysVSHZB0H9HNYeeKZsxnXDpaoTOgx
JlRsQYjj0b8o8HQGEkwxwqnMwVgNUskjZGPwbG9SQdxYW/t3Hiv8V5tVrxI77CaE
Ekz4myg9C3JykhMwCx3AfE50wVTypnv5RVF8LwpX6z5tfKcN9VotRzNKsTdkpTGX
1Y8D91cfFpsxFfcFvoHwBbc7jirjI2x9Gl6Z8txAKIeue6yE+Nq/ZEE1VNzqRjW4
DQP67ZXokxV5PBton076T1X3zAATjNJ0XtvryX1+boXto6d8AUDDsahOEq89QAme
yJv4yN1sAI0w2ux6R+qiRzXIplvC5HDzLRnrC9p0ldKQGrA9gZknYV8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrgJfrqvIH49aHMmzbU6
71c1ENqMpAW4AW4oFQwO0Z4+e/u3+kx/lSQ1eSgAt30EnzSI42jsH3gzIyMYy5cA
RrM0WD/41z7qI6CF69DlI0xSRNz9CxwziqSH0slwQgW14BxsT+070ZPHaGX3xUL1
6i1+8RMLJuSbS6dUzOq8RxqJX4YgpLx9GMmzf59hSBvfa6GyGz326C/9tapBdcnX
e5F29HIiyrEhI4xcmxDo1zGVZOKSW6ko0MYkdZp2x1RhPcwNM8jwqdBWy8Ks52+n
J46KFTm0XJco6g7n+TZJkj/40C2WyaNqPBX5QZeEk74QmoYUuGOYXJGh/hUilEw4
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 417798053449637247395193632606668398878306
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-14 15:49:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-12 15:49:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stiffmagazine.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22561170355405894032044630701063843055906093682173840821739142836734921343673171184838437282508820816506787858717824378635217068906612316447330734660375528623101074710793518303751439995851645962964735316466116103090823140930895535359897821474730158862321641411102652096049743381068811417184404667433484470778482720698485360215562523424359289440071494014425739217368970790115855197414409572261883341533642991571908271419679746941841141747578728295776165341844820608909709101766151719239253420660162743301174269203248985947258498412293038769318995343376866842106827012683521855878269004896215888407151636825386326439943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3772b88f37d707ff01caff5ac1f18774302d9dc2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (614 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airlock-bound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boatmanbeeing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptocrate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daventure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klimaoase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logodecorating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rumi.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segwaymoped.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcellfortwayne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stiffmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcl.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thezookeepersband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totallyfreshface.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vvendelighting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wateranalysistesting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airlock-bound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boatmanbeeing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cryptocrate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daventure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klimaoase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.logodecorating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rumi.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.segwaymoped.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcellfortwayne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stiffmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tcl.life'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thezookeepersband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.totallyfreshface.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vvendelighting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wateranalysistesting.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f7802ba3a0000040300483046022100dd5bf59bf7f03f41cac4a74dcd2a0f55989978a78bc76ce905605bd30c8ad3370221009cf6b765966aa8eec7a6821718f092cb7a51232b962fc20a3a72d9bcacb0f155007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f7802baf8000004030047304502207769ac172ed47038a1f8ececcd4a0bb5921651a8d7917510352772d20451aba8022100e332282d1cdbae3740010c5a56e54a593483e9623917fb0ace4a63f785843922
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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