54gene.com
Issued by R3
About this certificate
This digital certificate with serial number 04:88:9e:86:f5:06:1b:9d:44:29:d8:d8:42:2a:97:94:38:e9 was issued on by Let's Encrypt.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=54gene.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:88:9e:86:f5:06:1b:9d:44:29:d8:d8:42:2a:97:94:38:e9Serial Number (int): 394938264389075946080592127582973189175529
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 43:09:e8:54:9c:4c:13:0b:8b:b8:94:ec:4e:1a:b1:8e:7a:53:a8:fe
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 6f:a3:bc:25:d1:8f:e3:db:da:e4:3e:70:fb:b1:0c:ed:62:01:68:ac
Fingerprint (sha256): ce:8a:7e:33:ad:66:68:ad:32:7e:f8:0d:92:08:64:81:79:41:ec:1a:1e:78:5d:47:4b:c5:27:3a:3e:a0:b6:40
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate 54gene.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for 54gene.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
54gene.com
Other certificates including the domain name 54gene.com
(limited to 100 certificates)
api.54gene.com
api2.54gene.com
blog.54gene.com
account.myusa.cc
consumer.54gene.com
54gene.com
support.gat.technology
concierge.krhospitality.co
account.myusa.cc
54gene.com
support.smgonline.us
api2.54gene.com
support.smgonline.us
concierge.krhospitality.co
support.gat.technology
54gene.com
man1.plaza.com.co
api2.54gene.com
support.54gene.com
blog.54gene.com
support.54gene.com
54gene.com
54gene.com
*.consumer.54gene.com
api.54gene.com
suporte.idxcode.com.br
support.smgonline.us
account.myusa.cc
support.gat.technology
account.myusa.cc
support.gat.technology
account.myusa.cc
blog.54gene.com
suporte.idxcode.com.br
account.myusa.cc
man1.plaza.com.co
adminsupport.gat.technology
54gene.com
account.myusa.cc
*.consumer.54gene.com
account.myusa.cc
account.myusa.cc
54gene.com
concierge.krhospitality.co
54gene.com
account.myusa.cc
adminsupport.gat.technology
*.consumer.54gene.com
www.54gene.com
api.54gene.com
support.jevsupport.com
account.myusa.cc
account.myusa.cc
concierge.krhospitality.co
account.myusa.cc
support.54gene.com
www.54gene.com
rp.54gene.com
54gene.com
provider.54gene.com
support.gat.technology
suporte.idxcode.com.br
support.jevsupport.com
account.myusa.cc
support.gat.technology
54gene.com
admin.54gene.com
man1.plaza.com.co
support.gat.technology
54gene.com
support.gat.technology
*.54gene.com
suporte.idxcode.com.br
www.54gene.com
adminsupport.gat.technology
man1.plaza.com.co
blog.54gene.com
consumer.54gene.com
api2.54gene.com
blog.54gene.com
www.54gene.com
account.myusa.cc
54gene.com
adminsupport.gat.technology
account.myusa.cc
rp.54gene.com
account.myusa.cc
consumer.54gene.com
54gene.com
blog.54gene.com
support.gat.technology
account.myusa.cc
support.gat.technology
api.54gene.com
account.myusa.cc
54gene.com
api.54gene.com
admin.54gene.com
support.smgonline.us
54gene.com
api2.54gene.com
blog.54gene.com
account.myusa.cc
consumer.54gene.com
54gene.com
support.gat.technology
concierge.krhospitality.co
account.myusa.cc
54gene.com
support.smgonline.us
api2.54gene.com
support.smgonline.us
concierge.krhospitality.co
support.gat.technology
54gene.com
man1.plaza.com.co
api2.54gene.com
support.54gene.com
blog.54gene.com
support.54gene.com
54gene.com
54gene.com
*.consumer.54gene.com
api.54gene.com
suporte.idxcode.com.br
support.smgonline.us
account.myusa.cc
support.gat.technology
account.myusa.cc
support.gat.technology
account.myusa.cc
blog.54gene.com
suporte.idxcode.com.br
account.myusa.cc
man1.plaza.com.co
adminsupport.gat.technology
54gene.com
account.myusa.cc
*.consumer.54gene.com
account.myusa.cc
account.myusa.cc
54gene.com
concierge.krhospitality.co
54gene.com
account.myusa.cc
adminsupport.gat.technology
*.consumer.54gene.com
www.54gene.com
api.54gene.com
support.jevsupport.com
account.myusa.cc
account.myusa.cc
concierge.krhospitality.co
account.myusa.cc
support.54gene.com
www.54gene.com
rp.54gene.com
54gene.com
provider.54gene.com
support.gat.technology
suporte.idxcode.com.br
support.jevsupport.com
account.myusa.cc
support.gat.technology
54gene.com
admin.54gene.com
man1.plaza.com.co
support.gat.technology
54gene.com
support.gat.technology
*.54gene.com
suporte.idxcode.com.br
www.54gene.com
adminsupport.gat.technology
man1.plaza.com.co
blog.54gene.com
consumer.54gene.com
api2.54gene.com
blog.54gene.com
www.54gene.com
account.myusa.cc
54gene.com
adminsupport.gat.technology
account.myusa.cc
rp.54gene.com
account.myusa.cc
consumer.54gene.com
54gene.com
blog.54gene.com
support.gat.technology
account.myusa.cc
support.gat.technology
api.54gene.com
account.myusa.cc
54gene.com
api.54gene.com
admin.54gene.com
support.smgonline.us
54gene.com
Certificate
The complete raw certificate details for 54gene.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgISBIiehvUGG51EKdjYQiqXlDjpMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MTAyMzE0NTJaFw0yNDA3MDkyMzE0NTFaMBUxEzARBgNVBAMT CjU0Z2VuZS5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQD48WNw t3HMgBmCYONQkNFCTBGEX5sMdLdEyngcC8aIaIdbgSWAxieM5V56hnNYIzEYBByb ncGDEaPheFQJseSdkhg/AXYs+UHMAdKwQWLUscz9bpi6HVR/AQIwgzgBfmg+mav+ ni1hiME3rXy4cCXheyxSAtuG7vVBnHMJiG6EeSSWdy3wEakgczCXu2S+hlZviPcr 0z+ZlnNiiT/tY1KyjbK8ui7lrYzjy0X4uKLSKUDuVhOkNq3pG2ijXDIHJGqppyF1 YmeO2rrMNpi0gPgEmdpUmwpE0GpP5qHU2X8SeaJ68ajh5OeTTLmlhyrdtFUzxCnq cIMP3m+7nEjFB/YRSlfXZezoPIEX5IBWJLMsp3I/UPDQF0/SJfKHYb0aEWn0/sYG Sm4Ek9p9pK+JDnRYXZvXqlSiprIiY56kBmgT7pBa1fFnSp/GHkYdxN72+MNDp2nf kIpUzUMikzYNwO/ELl1XpTvBFAgyqSPt9j8v2fiJWsVIKe4FAfNyD08X8wUkjvj0 GTiHLHaJQ2CnOUKxMSgWh6z5dQhpi+NOcOsc/x4LV8vMi2OFpy1wHiWOCP9dJomU a8zQbAHztx5JJAUYDNL2CR2sIsL7NDLp3zVQ10VZzVoKgF9KiGHUN29sR4v5VN5I +NoxXQ4Uv17IG2W6adRSBQNLlpLscohDVlqkrwIDAQABo4ICDTCCAgkwDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB Af8EAjAAMB0GA1UdDgQWBBRDCehUnEwTC4u4lOxOGrGOelOo/jAfBgNVHSMEGDAW gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz LmkubGVuY3Iub3JnLzAVBgNVHREEDjAMggo1NGdlbmUuY29tMBMGA1UdIAQMMAow CAYGZ4EMAQIBMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYASLDja9qmRzQP5WoC +p0w6xxSActW3SyB2bu/qznYhHMAAAGOyoHfFQAABAMARzBFAiBnlAl9WpxH03TB IxgKed5nU6+YN7AgY7GELrTrI1qbdAIhAMeaKxr6nU4QmLjl/+8PwU3DEcSAHUS1 RYnugLMY64TmAHcA3+FW66oFr7WcD4ZxjajAMk6uVtlup/WlagHRwTu+UlwAAAGO yoHf1gAABAMASDBGAiEAgeEhQh3nIbXIcyfoqyZPVYGJzkS2JvYw0kgcStnH1tQC IQDG3LN63bBnrz5O/ok+cUG9+SgYiMq8rQdTFBM2atW/8zANBgkqhkiG9w0BAQsF AAOCAQEAU/yDhGw+Zs5zAhCJAk+mVL0BRQwcdTdAD/VtqZOKpPAe+XrfRIRvcp5v lFYPa7qwSI+AkbzOkY7Ds8McOUqYjWr1clw4O9Uz3wPRCAXYuD0PjXft0zBz4Ndk /ya4f3Qh6AHENGS+iB0QhGo+o9Z8thRNm35s8cLvHh/WQ1rL+qzlW9YZMrgnGX6Z GEoGPV14MpPIsEk+VO4tbSXdVIaUM97ysczkyjy2q+VsgWWDGmNjoKNsgRFkTZMh NkBayxjJz/Tj9aD9agwnyJZVcJDSjqzvUIQc9pnl30N+ezQE9gSaflaguTVDhJvj 1r9rSDB4CZt/Gk1yopoHDlkmTmVEMQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA+PFjcLdxzIAZgmDjUJDR QkwRhF+bDHS3RMp4HAvGiGiHW4ElgMYnjOVeeoZzWCMxGAQcm53BgxGj4XhUCbHk nZIYPwF2LPlBzAHSsEFi1LHM/W6Yuh1UfwECMIM4AX5oPpmr/p4tYYjBN618uHAl 4XssUgLbhu71QZxzCYhuhHkklnct8BGpIHMwl7tkvoZWb4j3K9M/mZZzYok/7WNS so2yvLou5a2M48tF+Lii0ilA7lYTpDat6Rtoo1wyByRqqachdWJnjtq6zDaYtID4 BJnaVJsKRNBqT+ah1Nl/EnmievGo4eTnk0y5pYcq3bRVM8Qp6nCDD95vu5xIxQf2 EUpX12Xs6DyBF+SAViSzLKdyP1Dw0BdP0iXyh2G9GhFp9P7GBkpuBJPafaSviQ50 WF2b16pUoqayImOepAZoE+6QWtXxZ0qfxh5GHcTe9vjDQ6dp35CKVM1DIpM2DcDv xC5dV6U7wRQIMqkj7fY/L9n4iVrFSCnuBQHzcg9PF/MFJI749Bk4hyx2iUNgpzlC sTEoFoes+XUIaYvjTnDrHP8eC1fLzItjhactcB4ljgj/XSaJlGvM0GwB87ceSSQF GAzS9gkdrCLC+zQy6d81UNdFWc1aCoBfSohh1DdvbEeL+VTeSPjaMV0OFL9eyBtl umnUUgUDS5aS7HKIQ1ZapK8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 394938264389075946080592127582973189175529 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-10 23:14:52 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-09 23:14:51 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '54gene.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1015598521493611300696028746131407654101277618255597513256995301898533602906573419420585667812720329936932185338575372725322201797852147710147594894580411006261337257135485173597804094832171435287869407165627997628180497388500210266243698601194896852678501039172679592595493412383175579372436733735371657219814520375509078299449678071457832902723258795473103292520486309389433473227366258604009379909559288018693758407196104191923159922856954336564234684415825495193358665938560520474844953274435361923351622735873603898386454364509138375101855892840071696634665742764390158941223745186087823378361990802905630940651646862900141694503309531958961243300495353719056866587678006470378897847460744648827012489845738156139992612471072743882006508357126366156500530614211660923927804250716940726835265261417143306610216083183780374418005135794422167415059552525893418721073830365675448103807794807503733500951348918502446316967612989227389132656304060802494275972273544650723790889067668025340707251040648819302906293640472150426501683958751017677818092601818233602914561429971396627177398318249340039135633791511574743599141658449438446208696840597218662969440784505432518279476341420046008563964928634246759593345094443820935675817665711 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4309e8549c4c130b8bb894ec4e1ab18e7a53a8fe . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '54gene.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018eca81df15000004030047304502206794097d5a9c47d374c123180a79de6753af9837b02063b1842eb4eb235a9b74022100c79a2b1afa9d4e1098b8e5ffef0fc14dc311c4801d44b54589ee80b318eb84e6007700dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018eca81dfd6000004030048304602210081e121421de721b5c87327e8ab264f558189ce44b626f630d2481c4ad9c7d6d4022100c6dcb37addb067af3e4efe893e7141bdf9281888cabcad07531413366ad5bff3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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