sporty.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:22:7e:a9:a4:97:e1:4e:6e:4d:8b:ba:28:da:e8:c4:53:0b was issued on by Let's Encrypt.

With 48 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sporty.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:22:7e:a9:a4:97:e1:4e:6e:4d:8b:ba:28:da:e8:c4:53:0b
Serial Number (int): 360187107766339242612947813905973001868043
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ec:44:31:05:70:98:d8:ee:3e:e4:f5:db:36:0c:4b:1f:53:4c:3c:d4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 26:bc:c8:ba:79:28:c1:ee:9c:24:b2:5a:b2:e7:43:04:b1:a0:e1:0c
Fingerprint (sha256): d5:3a:15:61:a7:fe:8a:ca:bf:9e:c9:a0:36:39:f4:bc:a4:73:4c:36:62:43:20:80:79:ec:d2:f5:72:4c:e1:f0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.co.nz

48

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aimsgames.co.nz
aucklandallstarsvolleyball.co.nz
aucklandcurling.nz
baseballfoundation.nz
basketballtaranaki.co.nz
baysathletics.co.nz
bopkartclub.org.nz
bowlsstadium.nz
cliftonrugbyclub.co.nz
cromwellfootballclub.co.nz
fbfc.co.nz
ferrymeadbaysfootball.co.nz
franklindirtkartclub.co.nz
gisbornespeedway.co.nz
hawkesbaymtb.co.nz
hbblades.com
hbcfct.org.nz
hbhockey.org.nz
kartsportcanterbury.co.nz
kartsportmarlborough.co.nz
kartsporttaranaki.co.nz
kartsportwhangarei.co.nz
kcac.org.nz
kcsh.co.nz
kcu.co.nz
kcu.nz
kelstongirls.school.nz
knowledgelibrary.co.nz
makesomenoise.nz
motuekahigh.school.nz
nelsonsuburbs.co.nz
northcitycricketclub.co.nz
ponekerugby.co.nz
prebbletonrugby.co.nz
puketapuhb.school.nz
qpafc.co.nz
rollestoncollege.nz
sacredheartnapier.school.nz
softballcounties.co.nz
softballcounties.org.nz
softballfranklin.org.nz
sosouthland.org.nz
sporty.co.nz
stmaryshastings.school.nz
surftocity.co.nz
taurangarowingclub.co.nz
tsssa.org.nz
wheelblacks.com

Other certificates including the domain name sporty.co.nz

(limited to 100 certificates)
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
turbotouch.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
mtrbmx.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporthb.net.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
uat.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
www.sporty.co.nz

Certificate

The complete raw certificate details for sporty.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDnT0n2fHrhrlZNl/AQd
36nIeu0J3+uYpYTDc6oTfC+94yinCyy4lNDrz6xgIdB46EhyRxJjJJ1Oxdp5oOsf
syggxCZHGo5cu9w1vq7cVx1r/4kxCDcN2tZynNkJgckRPG6tQUpCHTFZEH1lPj/k
CNTyeJdCW+bdmDRxjeXcYVLWp6JM9h6BaCie6XG/7sv97jAgo0ZU+zardIgc16zf
0GFbCzIINZbwbJ8tK0smXeuZK+aCtDk05jduQO7BNHh3BSrcaZMzBRUXQkqL6huG
Q/1NKpKEcFFoAas73l+o+JQr+JP4/fSjcKcw2vFJBFksJwNoOiBjVgmx9tMmdyRD
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 360187107766339242612947813905973001868043
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-14 18:49:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-12 18:49:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24266270322301154759621465366629345652302969210394363264490991029617105011322835795395916099889645582798253802437750559399553948538146981409970677496463828752240412678879574662320211325774119274037333470629022650234625155995069798893017137528021609076677932924776513421918712106166017389933655246586598940287413278375050178326262915226295820108493043701998662177891302617977461639052531440902665830762906489611161757614328316696098468589975288971794498550600619154159487084311603162079405482692093752577507088592223598945099535276627949684935128294331926253365457619041969917165301214770868493156332338256177566860101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ec4431057098d8ee3ee4f5db360c4b1f534c3cd4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1018 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aimsgames.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandallstarsvolleyball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandcurling.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballfoundation.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basketballtaranaki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baysathletics.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bopkartclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlsstadium.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliftonrugbyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cromwellfootballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fbfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ferrymeadbaysfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franklindirtkartclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gisbornespeedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbaymtb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbblades.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcfct.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kartsportcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kartsportmarlborough.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kartsporttaranaki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kartsportwhangarei.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcac.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcsh.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcu.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kelstongirls.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowledgelibrary.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makesomenoise.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motuekahigh.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonsuburbs.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcitycricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponekerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prebbletonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puketapuhb.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qpafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rollestoncollege.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheartnapier.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softballcounties.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softballcounties.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softballfranklin.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sosouthland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryshastings.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surftocity.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taurangarowingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsssa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wheelblacks.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e3e83a4bb0000040300473045022100df0ca1f7b71f22595ae78eee2b8f055079b88159947b371c0d94efbc80c1a0f802205095ea93c8444a734533d4c364b5455077a601e358ca5be15947570f642193500076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e3e83a4c20000040300473045022100a1d6e1b362ad7d567d11538a00ca88017a793a4cdcee679a6635fa1d7d1070f902201dfc0556dc70f9a2325166d45d88340388b0dbd483eac7ce61fa82ea4b1d0f20
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0004d90859bdb4da9c2f343a7f47ebdc2442429830ff4c1c8b3a5a559887f0a18e4a71c8ff85ae04cf7f15da90fc2602e5b847d91556be20621a6cf674e909f6765428a5ced34eec95690e62514872bff2ef0653bb4ac928b216844b9ccfceea07bc242b0fbcd5b6e6dd3626103204a04cbc8e0aa4153d24499631f033f14f6b7785a7f84e3abd73a0648148a5bd07226ed59f40865082831ee6f1ccfb7d09840a19101e7faea52c99dc683fe86a138570c9240a8382d7a3c1668b1123478c0a80565e8f875fdd0f20744bc38ba963278e2c4c8a65017e82df2d2bad7bb32c3e852db77756266226a88a3e07ee073e60bdb59f48df523b5ec7efc2f761316ad4fd