sporty.org.nz

Issued by R3

About this certificate

This digital certificate with serial number 03:92:a0:a5:cd:ac:60:01:12:dc:ab:b0:70:04:c4:aa:07:06 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sporty.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:92:a0:a5:cd:ac:60:01:12:dc:ab:b0:70:04:c4:aa:07:06
Serial Number (int): 311231620745595924951735531469890032109318
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 92:44:c0:6e:04:ce:66:27:fe:09:86:9b:fb:1b:70:b3:d3:c0:a7:e8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 07:69:d1:39:37:13:82:bc:9f:f9:03:9b:ed:3c:bc:49:cf:4a:c1:47
Fingerprint (sha256): ca:a8:22:7d:d9:87:c5:96:05:8f:0d:2a:0c:e2:07:b2:f4:38:dc:e8:06:7e:56:d3:fa:73:18:ab:0a:7b:71:c2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.org.nz

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

athleticsotago.co.nz
aucklandsoftball.org.nz
canoepolohb.co.nz
cfc.co.nz
christchurchfootballclub.co.nz
cra.kiwi
cricketwellington.co.nz
ellerslieeagles.co.nz
fenciblefoundation.co.nz
freyberg.ac.nz
golfnorthland.co.nz
harbourgolf.co.nz
hastingsboys.school.nz
healthyfamilieswaitakere.org.nz
hockeywanganui.org.nz
huianetball.co.nz
kartsport.org.nz
kirweerugby.co.nz
leamingtonrugby.co.nz
lindisfarne.school.nz
lrsc.co.nz
mahe.kiwi
manawatusoftball.org.nz
maniapoto.school.nz
maoribasketball.com
marlboroughnetball.org.nz
marlboroughtrampingclub.co.nz
metrofootball.org.nz
mff.nz
mitre10park.co.nz
mmc.school.nz
naenaeswimclub.co.nz
nzteachersgames.co.nz
omuafc.org.nz
parklandsrugby.co.nz
patoka.school.nz
pbhockey.co.nz
pioneerfishingclub.co.nz
polo.org.nz
porthillunited.co.nz
rotoruaunited.co.nz
shirleyrugby.co.nz
skeggsfoundation.nz
soulutionzsports.nz
sportsafe.co.nz
sporty.org.nz
sportycrm.co.nz
sportycrm.com
stmw.school.nz
supercrm.co.nz
volleysouth.org.nz

Other certificates including the domain name sporty.org.nz

(limited to 100 certificates)
sporty.org.nz
www.sportycrm.com
sporty.org.nz
sporty.org.nz
www.giafc.co.nz
sportycrm.com
sporty.org.nz
fdmc.school.nz
arrowtownrugby.co.nz
sporty.org.nz
sporty.org.nz
www.sportsground.com
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
www.sportsground.com
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
freyberg.ac.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
www.sporty.org.nz
sporty.org.nz
www.ams.school.nz
www.skeggsfoundation.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz

Certificate

The complete raw certificate details for sporty.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/Af5wdf7tvolMdwh2nT
XvyRXL3tTgBdHHN20m3xPhr9YbqZepHIRpt/H0b15RGh5gidWRB+trCswtRIKN8B
w4iqY4prrm52DdWPKuVT1ADAs+KI95aU+OP+BNd0+dZYDyuGR3e31XB3iGr5mNyY
zLHSTY24Hh5aB8v6M8ghVz9ZkPyVCTEXF+xv2Ovv7wJ6mhiL+T2f+Mk7FpYnuu9b
cg/vIvSD4pQq3ht7QrvH3zOSlTpFv0GfbJ38omUc+bkBBiHFeE28bq8F+OlufJRf
6SVaJDqb0Efyw8E4VHc4s0LlXB+2stL/EcXggJvLSxvAIKwH/CEQ8oSbn6/0UC+q
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311231620745595924951735531469890032109318
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-12 00:04:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-11 00:04:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29279458309969594684692288110416232519865561751084934278723495479148128209720474729208638529406486044422034538708120043610021468225643177475040938122388781683943831539909913576998554507294455955567847707620716837398882444055800800612392314341653477487463824670946352536802187303654383020479056532750910793465578419231952441487451622641650379926745934039875101697928101271056595625131679625987233644522774748358564534064061434800018499548866024845967035774208415985333344725220481110523479537930836864876337859493089292740042519041745434595692948405238799078974755339227760894175812380435772006286713770367497280662113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9244c06e04ce6627fe09869bfb1b70b3d3c0a7e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1023 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athleticsotago.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canoepolohb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christchurchfootballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cra.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cricketwellington.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellerslieeagles.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fenciblefoundation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freyberg.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golfnorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harbourgolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastingsboys.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyfamilieswaitakere.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeywanganui.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huianetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kartsport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirweerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leamingtonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lindisfarne.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lrsc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahe.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manawatusoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maniapoto.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maoribasketball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughnetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughtrampingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrofootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mff.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitre10park.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmc.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naenaeswimclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzteachersgames.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omuafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parklandsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patoka.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pbhockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pioneerfishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porthillunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotoruaunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shirleyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skeggsfoundation.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soulutionzsports.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsafe.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportycrm.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportycrm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmw.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supercrm.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volleysouth.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cfb328a870000040300473045022100d052faccf522e48328c943ebc7074ed330feaed886931d4f7b7422afa95baae9022055addfaa94d21dcf7067596d573a1af14811e05dfc9c1d9545ba178229eb9c65007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018cfb328a6f00000403004730450220748d600b824f89860f82800974ebc5449f3fbc3c16ab08f212a1db1dfcadb1d2022100fa8439d36cdea6a4f3e35a98e1f90fbc7bf41315f8bc60dc9afd7ffdd8d357be
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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