www.vegezzi.com

Issued by R3

About this certificate

This digital certificate with serial number 03:16:1d:c8:b6:b4:cb:d8:a1:ca:8f:dd:39:0a:aa:2b:10:50 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.vegezzi.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:16:1d:c8:b6:b4:cb:d8:a1:ca:8f:dd:39:0a:aa:2b:10:50
Serial Number (int): 268862659644513560128085836658738826252368
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e1:b3:5b:10:95:84:15:57:55:b9:cd:00:f4:fb:af:8d:dc:c3:73:3a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e5:08:a7:54:bc:ce:06:ad:d1:3a:62:9d:00:8b:00:c2:ac:1f:89:70
Fingerprint (sha256): dc:57:57:57:2e:ab:03:e2:bc:bc:f8:66:05:4c:11:af:2f:19:40:cf:79:fe:6f:4a:ba:10:63:9f:b1:ed:1f:db

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.vegezzi.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.vegezzi.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

4dchef.com
c5ai.com
clubball.com
community-ecom.com
isoverthehill.com
long-dog.com
midbeam.com
sekshuizen.com
setmark.com
soaramerican.com
sportboeken.com
vegezzi.com
vhnvlksvan.com
vip-drive.com
www.4dchef.com
www.c5ai.com
www.clubball.com
www.community-ecom.com
www.isoverthehill.com
www.long-dog.com
www.midbeam.com
www.sekshuizen.com
www.setmark.com
www.soaramerican.com
www.sportboeken.com
www.vegezzi.com
www.vhnvlksvan.com
www.vip-drive.com
www.xn--5dbfq1a4c.com
xn--5dbfq1a4c.com

Other certificates including the domain name vegezzi.com

(limited to 100 certificates)
crowdreviews.co
replacrments.com
myschoolbucks.co
suty.me
www.jami.boston
suty.me
myschoolbucks.co
replacrments.com
gazetemansetleri.net
vegezzi.com
replacrments.com
saliga.com
crowdreviews.co
myschoolbucks.co
replacrments.com
radionext.tv
replacrments.com
replacrments.com
baldswimmers.com
replacrments.com
replacrments.com
www.vegezzi.com
myschoolbucks.co

Certificate

The complete raw certificate details for www.vegezzi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG5TCCBc2gAwIBAgISAxYdyLa0y9ihyo/dOQqqKxBQMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA3MTQwMDE0NDBaFw0yMzEwMTIwMDE0MzlaMBoxGDAWBgNVBAMT
D3d3dy52ZWdlenppLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AJToknpmRFN4TTV6uQK+514W15URwEG2OXvreoeeFuBfuo5tD22zxuVOp5X/e6n7
HoC/lkXWkK0dgXAh/tN8gFzj4/kEEt56bijckdMgS2uCd5cCcXmuL6GLPMsXexjW
9r62psMgHcabYTga7Ejzno8sUJ66uM4JAFnZjfqO4dJOuI/RDer3cqjylUx447+m
g6ZdRrdiJpJWJY6AhsZBBO18beihNN9sK9s3F6t2WkVbXOmNsv+bXyAJhZg6HZBl
B9ZtJJmDRAP+lQxQ97TN4JGCS17XVNu7o8vJkx4inu2beUdqFWBqaxM41/teXD/q
Y3UjIWG5y2DMgW+GgmGB3ucCAwEAAaOCBAswggQHMA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV
HQ4EFgQU4bNbEJWEFVdVuc0A9PuvjdzDczowHwYDVR0jBBgwFoAUFC6zF7dYVsuu
UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v
cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y
Zy8wggITBgNVHREEggIKMIICBoIKNGRjaGVmLmNvbYIIYzVhaS5jb22CDGNsdWJi
YWxsLmNvbYISY29tbXVuaXR5LWVjb20uY29tghFpc292ZXJ0aGVoaWxsLmNvbYIM
bG9uZy1kb2cuY29tggttaWRiZWFtLmNvbYIOc2Vrc2h1aXplbi5jb22CC3NldG1h
cmsuY29tghBzb2FyYW1lcmljYW4uY29tgg9zcG9ydGJvZWtlbi5jb22CC3ZlZ2V6
emkuY29tgg52aG52bGtzdmFuLmNvbYINdmlwLWRyaXZlLmNvbYIOd3d3LjRkY2hl
Zi5jb22CDHd3dy5jNWFpLmNvbYIQd3d3LmNsdWJiYWxsLmNvbYIWd3d3LmNvbW11
bml0eS1lY29tLmNvbYIVd3d3Lmlzb3ZlcnRoZWhpbGwuY29tghB3d3cubG9uZy1k
b2cuY29tgg93d3cubWlkYmVhbS5jb22CEnd3dy5zZWtzaHVpemVuLmNvbYIPd3d3
LnNldG1hcmsuY29tghR3d3cuc29hcmFtZXJpY2FuLmNvbYITd3d3LnNwb3J0Ym9l
a2VuLmNvbYIPd3d3LnZlZ2V6emkuY29tghJ3d3cudmhudmxrc3Zhbi5jb22CEXd3
dy52aXAtZHJpdmUuY29tghV3d3cueG4tLTVkYmZxMWE0Yy5jb22CEXhuLS01ZGJm
cTFhNGMuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBAwYKKwYBBAHWeQIEAgSB
9ASB8QDvAHUAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGJUfbe
KgAABAMARjBEAiAXKgdc5/aFB16rGV/fAsCWYGOmBvrzwL9yURXqI61hrAIgCPlU
Kdwgvc95laIgsbNPRthtaqtXya8MhIGC+8CIUE0AdgDoPtDaPvUGNTLnVyi8iWvJ
A9PL0RFr7Otp4Xd9bQa9bgAAAYlR9t4pAAAEAwBHMEUCIQCFUOrFRKixbDcGU+0u
I8Nko/smQCFVNqeVxhi5ktOtmwIgagdyMQzuMdy5d2zvH6t6GScykg3BbFt8v7bS
frVyZzMwDQYJKoZIhvcNAQELBQADggEBAI2hbngYT57E0RZQ4RNVcDewO0x+yJnF
7zEU3Rm3kBTdr4o4MSzV6b33418NY9HyRwaFbpDRnk28YdL51E+goeYxMeSr96mH
KUA1z1oHHGBYUcCgMLJwpeJoTb4q/3WEtjXX8KTiOY5IxfJPwYACTWAfuUWDfP1y
7tceg+gjC5uKNTtdD0/ckQLz8Jycf3iX2fmeP7xPLMIjnsqgA0zJ+p45WZJQ/7av
ot3HaF+ZqSEudtKlpnaLEbuY2X/dx8lPen95XZhaCctnPs8hyI3gyPiVu6uWbmSU
bQmWILijvwAKS48wOOVKTW+i7+x2zyiun/WyewzpwhTrR+jlj1yI3pQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOiSemZEU3hNNXq5Ar7n
XhbXlRHAQbY5e+t6h54W4F+6jm0PbbPG5U6nlf97qfsegL+WRdaQrR2BcCH+03yA
XOPj+QQS3npuKNyR0yBLa4J3lwJxea4voYs8yxd7GNb2vramwyAdxpthOBrsSPOe
jyxQnrq4zgkAWdmN+o7h0k64j9EN6vdyqPKVTHjjv6aDpl1Gt2ImklYljoCGxkEE
7Xxt6KE032wr2zcXq3ZaRVtc6Y2y/5tfIAmFmDodkGUH1m0kmYNEA/6VDFD3tM3g
kYJLXtdU27ujy8mTHiKe7Zt5R2oVYGprEzjX+15cP+pjdSMhYbnLYMyBb4aCYYHe
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268862659644513560128085836658738826252368
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-14 00:14:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-12 00:14:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.vegezzi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18797954751408902269384972140508540907018257878615026315252299784221040613278609679770856784543801889514624147949389269387298624317150548703689201716434356484320390270985720253145472255432398636428687083382130966664380001167315227229763923843096058043573086573554809793378446822572519762916793759193659747584556424247180974143629142149198432509855451995960891298923544778239944866578689312123926982087182211754398127610192901563951323222377120049487945243539646455217854021776925215436662851961077072154771160130706902302231714800643067193399552693779526762712144357238536616437622006928506460772795058852194567708391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e1b35b109584155755b9cd00f4fbaf8ddcc3733a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (522 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4dchef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c5ai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community-ecom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isoverthehill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'long-dog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midbeam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sekshuizen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'setmark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soaramerican.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportboeken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vegezzi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vhnvlksvan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vip-drive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.4dchef.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.c5ai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.community-ecom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isoverthehill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.long-dog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.midbeam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sekshuizen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.setmark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soaramerican.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportboeken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vegezzi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vhnvlksvan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vip-drive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--5dbfq1a4c.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--5dbfq1a4c.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018951f6de2a00000403004630440220172a075ce7f685075eab195fdf02c0966063a606faf3c0bf725115ea23ad61ac022008f95429dc20bdcf7995a220b1b34f46d86d6aab57c9af0c848182fbc088504d007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018951f6de2900000403004730450221008550eac544a8b16c370653ed2e23c364a3fb2640215536a795c618b992d3ad9b02206a0772310cee31dcb9776cef1fab7a192732920dc16c5b7cbfb6d27eb5726733
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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