yakamafish-star.net

Issued by R3

About this certificate

This digital certificate with serial number 03:54:cd:d2:37:aa:e0:bd:2a:27:7f:f7:81:1a:77:86:1b:ef was issued on by Let's Encrypt.

With 54 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=yakamafish-star.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:54:cd:d2:37:aa:e0:bd:2a:27:7f:f7:81:1a:77:86:1b:ef
Serial Number (int): 290194159867186640095057172831875296009199
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fa:a7:30:22:60:b8:bb:18:b0:b5:6f:68:a3:cc:39:72:13:cb:22:14
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ca:d1:52:5c:d8:64:1c:f3:1f:32:02:71:74:97:4a:10:ca:11:0e:a3
Fingerprint (sha256): d1:58:86:c9:00:94:54:92:c1:ea:58:89:1f:b3:0c:52:91:d5:bf:5c:3c:24:79:2b:d9:46:1d:08:1b:52:bf:44

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate yakamafish-star.net

54

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for yakamafish-star.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alex.rcpd.msu.edu
backend-dev.americancouncils.org
bannext.rockhurst.edu
blackboard.nebrwesleyan.edu
bo-togel-terbesar.as-coa.org
bohuat.dev.oceana.org
btp.03-23.gastogel.novaparks.com
bukumimpi.gsm.cornell.edu
datasgp.gsm.cornell.edu
default.chemonics.com
devuploadgg-terbesar.as-coa.org
global7.gsm.cornell.edu
gm-togel.calrest.org
gmtogel.courtinnovation.org
gmtogel.dev.oceana.org
h303.ufcespanol.com
heng-heng.gsm.cornell.edu
idnpoker.ampaconline.org
iplf.archbalt.org
ips-tst.chop.edu
it.gsm.cornell.edu
joker-gaming.academic.gsm.cornell.edu
joker123.academic.gsm.cornell.edu
joker123.gsm.cornell.edu
kirkpatrickchoir.rutgers.edu
leonardo.ufcespanol.com
lobby.dev.oceana.org
mahjong-ways.academic.gsm.cornell.edu
maxwin.gsm.cornell.edu
mix-parlay.connorsstate.edu
mobile.archbalt.org
mobile.wthr.com
panel.christiancentury.org
pophealth.uahs.arizona.edu
prenursing.nebrwesleyan.edu
rtp-live.gsm.cornell.edu
rtplive.gsm.cornell.edu
securitytips.blogs.govdelivery.com
situs-togel.test.webservices.umich.edu
slot-gacor.m.gsm.cornell.edu
slot-joker.academic.gsm.cornell.edu
slot-pragmatic.ufcespanol.com
slotgacormaxwin.live.oceana.org
staging.test.webservices.umich.edu
tesuploadssgg.as-coa.org
uae.gsm.cornell.edu
ule.gsm.cornell.edu
white.technoserve.org
wke.gsm.cornell.edu
www.bannext.rockhurst.edu
www.gmi.edu
www.intr.gsm.cornell.edu
www.iti.rutgers.edu
yakamafish-star.net

Other certificates including the domain name yakamafish-star.net

(limited to 100 certificates)
yakamafish-star.net
yakamafish-star.net
dashboard.yakamafish-star.net
yakamafish-star.net
yakamafish-star.net
yakamafish-star.net
yakamafish-star.net
yakamafish-star.net
yakamafish-star.net
yakamafish-star.net
yakamafish-star.net
yakamafish-star.net
www.yakamafish-star.net
yakamafish-star.net
yakamafish-star.net
yakamafish-star.net

Certificate

The complete raw certificate details for yakamafish-star.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHSnemv0wZzcXAgMkBQX
ztwjNHFrHpIs5axrzzrdlw7T+GZAQLPiUvSZmF3ScRQ1Ni77M7wvvj8WKgEm6kmk
IGsqEr1NwVO/9M+bfL4ePy1ywV87Wx7ZOVVK4JWJMqctOtWZynJz3jX67Nda0+9B
++4/N4TAaLpUnxu83mMaTL+l/8yYin0iItxxZ3YRMvL8oMO9BWqFighCSszfIpRu
fGHjpEeodJZe7aLi7DcePvwyXZWi/al1YQeCdFkrpkcgk8myhP/APzQjk3bdKAlw
KQDdvQR4Y3b+bMJVibDWVrVqjLz+ybpaAJiOjKOmp9NDC6LZPJujVsE+mvYR8y2Z
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290194159867186640095057172831875296009199
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-26 02:11:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-26 02:11:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'yakamafish-star.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24295278889261962340330570593076765092564594026629510040566849443941721212705222905469227342749655760761925628146467776896918161669177237506061638055976839317974540229085566909601290432792766688540743857041618507082302908209321494362376641574366690514136936988276436757394515726000349835912320682069511736058985263380188984941851626522348036976567257123937402752130277851931257557691396509910741392947845349707974538616547869499133806197294376341097227039876415788275764051935080580783290065738507278734728703160147978353048962982659390140744073959855669537306275821116832669307766091573181749448001568724078979553621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							faa7302260b8bb18b0b56f68a3cc397213cb2214
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1441 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alex.rcpd.msu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backend-dev.americancouncils.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bannext.rockhurst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackboard.nebrwesleyan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo-togel-terbesar.as-coa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bohuat.dev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btp.03-23.gastogel.novaparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bukumimpi.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datasgp.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'default.chemonics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devuploadgg-terbesar.as-coa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'global7.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gm-togel.calrest.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmtogel.courtinnovation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmtogel.dev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h303.ufcespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heng-heng.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idnpoker.ampaconline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iplf.archbalt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ips-tst.chop.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joker-gaming.academic.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joker123.academic.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joker123.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirkpatrickchoir.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leonardo.ufcespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lobby.dev.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahjong-ways.academic.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maxwin.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mix-parlay.connorsstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.archbalt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.wthr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panel.christiancentury.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pophealth.uahs.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prenursing.nebrwesleyan.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtp-live.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtplive.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitytips.blogs.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'situs-togel.test.webservices.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot-gacor.m.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot-joker.academic.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slot-pragmatic.ufcespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slotgacormaxwin.live.oceana.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.test.webservices.umich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tesuploadssgg.as-coa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uae.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ule.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'white.technoserve.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wke.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bannext.rockhurst.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmi.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intr.gsm.cornell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iti.rutgers.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yakamafish-star.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018de36542940000040300483046022100ec0063b0c1f992deecc0e542725bfa07f8ed9ec82c9904a6342e000060c2cfa5022100cae402ea024e9aef092b290aa3507cf14349eac1e7d026a4b8784ec3d7228dc1007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018de36542a000000403004730450220590f8144401e2d2615d1d9c304a9a2fa07401e5b699d5632d05ba59f90ac3d450221009bca19f18b0ade3a6803186f211cc5f46ea0b4f2a98d18d8a1081d42a9fee18e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002b589fc1a9374ce01bb53bd91ee610b98d0f5a629da5ce0ad9348a63b87a0bb1a1ea4840d2f4368e22ef317459349f59fca20444a15b2ca8b5794434b4319d7d1874c41c75a073f4215bef4b77fe87b6f85bb289006b40d498a1555bc55bb446b2abf498468b5c56e72606c5def01d569d8826588ddb2510586354c15060bf0e5d22a9cb8a10e8f71347b0fd79af3053bf4eb923a10088e6cf34fd090f9ce9ea240537d54c4547a2d425a33766964ad1a140ff70d618a65ed105850622668800a0a8089b6006259e1320268f7b205d7cefd4ce0b81ead87ca16737d071dcbd7b15d0ac4c40e2e3f3af4f9bb4b68076f01a4813311714e8af2a1232c200319059