www.sportsground.com

Issued by R3

About this certificate

This digital certificate with serial number 03:db:ee:82:5b:49:23:21:81:11:54:d4:ff:77:36:cf:35:58 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.sportsground.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:db:ee:82:5b:49:23:21:81:11:54:d4:ff:77:36:cf:35:58
Serial Number (int): 336175729264048485218937635894640482661720
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b1:90:bf:3e:a5:45:ee:0e:61:59:69:3b:5b:8b:81:63:d0:05:5a:5f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 25:7c:02:cf:b5:2a:9f:50:15:35:86:28:37:0a:75:1a:81:31:e9:59
Fingerprint (sha256): bb:6d:22:23:74:0f:0d:5e:dd:1c:72:50:29:c7:2d:9a:76:10:15:4b:db:f0:92:91:e3:9a:7c:df:8e:f7:fe:56

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.sportsground.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sportsground.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ehub.lincoln.school.nz
www.athleticswairarapa.org.nz
www.aucklandspeedway.co.nz
www.aucklandspeedway.nz
www.baysidebaseball.co.nz
www.cashmere-soccer.co.nz
www.cashmerefootball.co.nz
www.centralfootball.nz
www.cfcc.co.nz
www.cjrs.co.nz
www.employmentarbitration.co.nz
www.equilegal.co.nz
www.gisbornespeedway.co.nz
www.gonville.school.nz
www.hastingscentral.school.nz
www.hbwaterpolo.net.nz
www.heatvolleyballclub.org.nz
www.invictusfencingclub.org.nz
www.kaitakefc.co.nz
www.kartsportmanawatu.org.nz
www.kartsportnelson.co.nz
www.kartsportwellington.nz
www.katikatirugby.nz
www.kelburncroquet.org
www.kelburncroquet.org.nz
www.masseyrfc.co.nz
www.nelsonspeedway.co.nz
www.netballnorthharbour.co.nz
www.ngaiwi.school.nz
www.northshoremasterswimmers.com
www.nsms.nz
www.nzaimsgames.co.nz
www.nzcanoepolo.org.nz
www.nzmrl.co.nz
www.ohainightcapsrfc.com
www.pakowhai.school.nz
www.palmycompanioncard.co.nz
www.piratesbaseball.nz
www.sportsground.com
www.starling.org.nz
www.tamateaprimary.school.nz
www.tasmanrugby.co.nz
www.taurangaramblers.co.nz
www.timaruoldboys.com
www.touchkatikati.nz
www.trihb.kiwi
www.waikarakaparkspeedway.co.nz
www.waikarakaspeedway.co.nz
www.waikarakaspeedway.com
www.waisssport.co.nz
www.wsbrc.co.nz

Other certificates including the domain name sportsground.com

(limited to 100 certificates)
www.nelsoncarclub.co.nz
www.blenheimgolfclub.co.nz
www.sportsground.com
sporty.co.nz
www.sportsground.com
support.sportsground.com
www.tabletennis.org.nz
sporty.co.nz
www.sportsground.com
support.sportsground.com
www.sportsground.com
support.sportsground.com
northcanterburyrugby.co.nz
support.sportsground.com
www.nztua.com
www.sportsground.com
www.schoolground.com
support.sportsground.com
support.sportsground.com
hastings-central.school.nz
ultrarunner.org.nz
www.sportsground.com
www.oacnz.org
www.sportsground.com
sporty.co.nz
aafl.co.nz
support.sportsground.com
sporty.co.nz
support.sportsground.com
sporty.co.nz
northharbourtag.co.nz
trenthamrifleclub.co.nz
www.sportsground.com
support.sportsground.com
support.sportsground.com
sporty.co.nz
aucklandmarist.co.nz
support.sportsground.com
www.wmsc.org.nz
support.sportsground.com
www.sportsground.com
support.sportsground.com
support.sportsground.com
lucknow.school.nz
www.badmintonhb.co.nz
pioneerbasketballclub.co.nz
www.melrosetargetshooting.co.nz
www.sportsground.com
www.sportsground.com
sporty.co.nz
basketballtaranaki.co.nz
sporty.co.nz
www.schoolground.com

Certificate

The complete raw certificate details for www.sportsground.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtp0Fx5FIrLxuBcF2Cswx
RE1QvAVEUqeg0OjIEiVES78qfLPJ9t1aXZwZqSmmoFrtPE8FUVHGjodAvo1DaZQ1
dbocFOWQ6LGyxM/ezMujIUhNHQ9gBjz/LP9O9lFmQ8Vro4/R3UJZOP8qR2w74DDT
I0Wo72X81GMiEmkdc5nCTM8L1nP5gPbcYD/tEslKpuM/x1ggju6Mrq+ba5jm36Q0
ZRRu0pAfbD7sasGOtqzK8yoFmbp6sGB1uOBmXsUamdWYdAuWMKi5owhkAovD66cF
pjrhqLX9idW2Jxd6k7WFdI6YCrQH0X9MQta4M0NZxEgimmDtO73Km4FvBDvZfeVj
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336175729264048485218937635894640482661720
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 21:04:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-10 21:04:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sportsground.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23052802222132151052792071290808145569111746054454937521289910692573567312020154748120827671706551330632642524181401066680642800515679305937244327488634249797552420649286157735454934395387622293396792719140508384197841137102427270420272889523429223788937835953251090889512565641728801565383951847099961863107053383933604383029189774909308882105979027858139458824765878021340494109836615107195011976515071535338985682798547890615982645989918258887672256621353115394643625306983705267376535096941579776938456579524566477738996330153248148546192434047121283789180450623251137960804975945144912177429326927699292727894853
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b190bf3ea545ee0e6159693b5b8b8163d0055a5f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1281 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehub.lincoln.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athleticswairarapa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandspeedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandspeedway.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baysidebaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cashmere-soccer.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cashmerefootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralfootball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cfcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cjrs.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.employmentarbitration.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.equilegal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gisbornespeedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gonville.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hastingscentral.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbwaterpolo.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heatvolleyballclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.invictusfencingclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaitakefc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kartsportmanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kartsportnelson.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kartsportwellington.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.katikatirugby.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kelburncroquet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kelburncroquet.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masseyrfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonspeedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballnorthharbour.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ngaiwi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northshoremasterswimmers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nsms.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzaimsgames.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzcanoepolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzmrl.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ohainightcapsrfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pakowhai.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.palmycompanioncard.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piratesbaseball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.starling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tamateaprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tasmanrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taurangaramblers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timaruoldboys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchkatikati.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trihb.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikarakaparkspeedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikarakaspeedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikarakaspeedway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waisssport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wsbrc.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e34b20d2a00000403004630440220681db47113081abca62c40dd12fe6eb88416b02327b81f65f5ec7643f26b91aa0220223adfad07bdeee65cb9f8cc4f72686c0988de364ad2d765b10ac36404af1bdd0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e34b20d30000004030047304502201518709973e457d2ac0abd84d1812bfcd600583eea00ca90f4f266dad6981ff60221008d0228333236395ed138c2803825fba38154298d63dc6f8b31d99e4c9e481004
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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