customrooftarp.com

Issued by R3

About this certificate

This digital certificate with serial number 04:82:a9:27:fc:73:05:15:af:a3:1a:ae:6b:09:a8:e5:91:e4 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=customrooftarp.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:82:a9:27:fc:73:05:15:af:a3:1a:ae:6b:09:a8:e5:91:e4
Serial Number (int): 392910698577908152928808093727308640522724
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5f:28:df:0b:e2:7a:1b:5d:53:1e:ea:96:85:a7:df:c7:c2:97:7d:af
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d4:cd:17:2c:d5:fe:37:23:0d:e2:a3:b1:6e:f0:30:ed:7b:47:4d:64
Fingerprint (sha256): c2:0e:62:51:24:d8:b2:15:50:28:79:fb:b1:19:df:a4:e0:df:c2:0b:45:07:04:02:54:4c:4b:19:fd:b0:38:33

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate customrooftarp.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for customrooftarp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

augmentedrealitymuslims.com
bufotoxin.com
celebrationstogo.com
customrooftarp.com
dailyscripturedevotional.com
erc-20r.com
germany-services.com
internaloverhaul.com
laminatedpanel.com
lubbocksportsdoctor.com
nostrbin.com
poisonivyphoto.com
ridesharedriverloans.com
seattlejointpain.com
thekai.com
www.augmentedrealitymuslims.com
www.bufotoxin.com
www.celebrationstogo.com
www.customrooftarp.com
www.dailyscripturedevotional.com
www.erc-20r.com
www.germany-services.com
www.internaloverhaul.com
www.laminatedpanel.com
www.lubbocksportsdoctor.com
www.nostrbin.com
www.poisonivyphoto.com
www.ridesharedriverloans.com
www.seattlejointpain.com
www.thekai.com

Other certificates including the domain name customrooftarp.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for customrooftarp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHkDCCBnigAwIBAgISBIKpJ/xzBRWvoxquawmo5ZHkMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA3MTMyMjM2MDRaFw0yMzEwMTEyMjM2MDNaMB0xGzAZBgNVBAMT
EmN1c3RvbXJvb2Z0YXJwLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKwksg8mKmq/XkBNfcNYMCBkPqsdLC2ZZ3mCNieyQaMSBF8DdJxsQ40+BKnk
l81ujGtDAE9ALpInCXAhSZ/yo2cQ7ZKw7YwhXQelmhzkGGBfj3TAIB7CWh6wDmrF
kGIkxB1cpjrAE6ka++hoIcD7HhFzNrSChsxul0/sh62g8LZ/ZEq5EjchDXm1S6oy
fYqBWczTdY9jjQhx8qVA+8W2P/eLiTzqOH7NGWvkpT2nG8DCCe3zSsb2ABSOcOYw
3lM+SBKJIfxPlAxNB1No3lNlRMmwgAL34axgBVSAZcG4VZu+xWMsWQvf1I/oIEMS
COOYWjZ3P9sWf9ITe5ScuASH5NsCAwEAAaOCBLMwggSvMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd
BgNVHQ4EFgQUXyjfC+J6G11THuqWhaffx8KXfa8wHwYDVR0jBBgwFoAUFC6zF7dY
VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw
Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy
Lm9yZy8wggK5BgNVHREEggKwMIICrIIbYXVnbWVudGVkcmVhbGl0eW11c2xpbXMu
Y29tgg1idWZvdG94aW4uY29tghRjZWxlYnJhdGlvbnN0b2dvLmNvbYISY3VzdG9t
cm9vZnRhcnAuY29tghxkYWlseXNjcmlwdHVyZWRldm90aW9uYWwuY29tggtlcmMt
MjByLmNvbYIUZ2VybWFueS1zZXJ2aWNlcy5jb22CFGludGVybmFsb3ZlcmhhdWwu
Y29tghJsYW1pbmF0ZWRwYW5lbC5jb22CF2x1YmJvY2tzcG9ydHNkb2N0b3IuY29t
ggxub3N0cmJpbi5jb22CEnBvaXNvbml2eXBob3RvLmNvbYIYcmlkZXNoYXJlZHJp
dmVybG9hbnMuY29tghRzZWF0dGxlam9pbnRwYWluLmNvbYIKdGhla2FpLmNvbYIf
d3d3LmF1Z21lbnRlZHJlYWxpdHltdXNsaW1zLmNvbYIRd3d3LmJ1Zm90b3hpbi5j
b22CGHd3dy5jZWxlYnJhdGlvbnN0b2dvLmNvbYIWd3d3LmN1c3RvbXJvb2Z0YXJw
LmNvbYIgd3d3LmRhaWx5c2NyaXB0dXJlZGV2b3Rpb25hbC5jb22CD3d3dy5lcmMt
MjByLmNvbYIYd3d3Lmdlcm1hbnktc2VydmljZXMuY29tghh3d3cuaW50ZXJuYWxv
dmVyaGF1bC5jb22CFnd3dy5sYW1pbmF0ZWRwYW5lbC5jb22CG3d3dy5sdWJib2Nr
c3BvcnRzZG9jdG9yLmNvbYIQd3d3Lm5vc3RyYmluLmNvbYIWd3d3LnBvaXNvbml2
eXBob3RvLmNvbYIcd3d3LnJpZGVzaGFyZWRyaXZlcmxvYW5zLmNvbYIYd3d3LnNl
YXR0bGVqb2ludHBhaW4uY29tgg53d3cudGhla2FpLmNvbTATBgNVHSAEDDAKMAgG
BmeBDAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3AHoyjFTYty22IOo44FIe
6YQWcDIThU070ivBOlejUutSAAABiVGcm3IAAAQDAEgwRgIhALAL/M5g+I0ZLd5p
qhVi6TmpGsOemNjQlrujxGqKUF8sAiEAx1VquNFTabRxbaAYx4yYQ0YIutlHfp5l
1uis5bx37aAAdgCt9776fP8QyIudPZwePhhqtGcpXc+xDCTKhYY069yCigAAAYlR
nJucAAAEAwBHMEUCIQDZI6YzsOQGfTFIAWprIq61Q7FGw8kcTU2id2pfhLY9PQIg
YXkZ0zWWXq/TUOQe1yKWbLAkcZg5QVRmt53VzEMzbngwDQYJKoZIhvcNAQELBQAD
ggEBADES/liyMAJoR1VxjVQn8xdVCjI3IdLPqBPwFXVNW77dvnZ15vQEOTyjzdvr
IvTqJo3f2PLKUqG/XDHjkS01h2wsg6+SKeTnUQICjxJNvTpHpYIGW2/mugq9pgq0
rKB0iDz3JwHsjf9QY8IWhACvkarTOdQgfdkfGsNH5XSa7VpRrJYNtOcdqnpxP18N
fXcMYqFaYLR0TGqYcfyvoduIAUeIGlblJMUA9B5YZPXkJJIYBNVzM6z+ceGWibPS
C0PEZNX2+bCcTSHQnutYzKRSiMgpcfP8jdjbMzJPb3LiHUos9DFW2x5hPonHiIoI
ZtHu3RnEtoX7W0orgrGYJ622DVY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCSyDyYqar9eQE19w1gw
IGQ+qx0sLZlneYI2J7JBoxIEXwN0nGxDjT4EqeSXzW6Ma0MAT0AukicJcCFJn/Kj
ZxDtkrDtjCFdB6WaHOQYYF+PdMAgHsJaHrAOasWQYiTEHVymOsATqRr76GghwPse
EXM2tIKGzG6XT+yHraDwtn9kSrkSNyENebVLqjJ9ioFZzNN1j2ONCHHypUD7xbY/
94uJPOo4fs0Za+SlPacbwMIJ7fNKxvYAFI5w5jDeUz5IEokh/E+UDE0HU2jeU2VE
ybCAAvfhrGAFVIBlwbhVm77FYyxZC9/Uj+ggQxII45haNnc/2xZ/0hN7lJy4BIfk
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 392910698577908152928808093727308640522724
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 22:36:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 22:36:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'customrooftarp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21731083701158287521477250795127292325339215455926100416007709141956995485261879784878364218785063007621040288649935372897050076906455768335030874429061451076263997588203838391595653820738359764577291915037902037985650462191913807651971874659723469806307354808854149705377850766813037217901047884618218031678969991197440808684858429658441646383354826768453576081031288264350459048193794497730128120139842256993694986936694224744669736934602093483970718820810777949840199309139945634187450599632341845447008755174988263856687963271771695037792375048715022661838024536748679044194142056551489605377531922717315885950171
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5f28df0be27a1b5d531eea9685a7dfc7c2977daf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (688 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augmentedrealitymuslims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bufotoxin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celebrationstogo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customrooftarp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailyscripturedevotional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erc-20r.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'germany-services.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internaloverhaul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laminatedpanel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lubbocksportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nostrbin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poisonivyphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ridesharedriverloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seattlejointpain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thekai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.augmentedrealitymuslims.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bufotoxin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.celebrationstogo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.customrooftarp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dailyscripturedevotional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erc-20r.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.germany-services.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.internaloverhaul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laminatedpanel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lubbocksportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nostrbin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poisonivyphoto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ridesharedriverloans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seattlejointpain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thekai.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189519c9b720000040300483046022100b00bfcce60f88d192dde69aa1562e939a91ac39e98d8d096bba3c46a8a505f2c022100c7556ab8d15369b4716da018c78c98434608bad9477e9e65d6e8ace5bc77eda0007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000189519c9b9c0000040300473045022100d923a633b0e4067d3148016a6b22aeb543b146c3c91c4d4da2776a5f84b63d3d0220617919d335965eafd350e41ed722966cb024719839415466b79dd5cc43336e78
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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