a.api.permutive.app

Issued by R3

About this certificate

This digital certificate with serial number 03:bd:bc:01:b2:81:85:e4:f0:fb:2f:48:85:18:37:4b:dc:97 was issued on by Let's Encrypt.

With 59 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=a.api.permutive.app

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bd:bc:01:b2:81:85:e4:f0:fb:2f:48:85:18:37:4b:dc:97
Serial Number (int): 325900128819373312947115085382474447707287
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:79:47:3a:b7:c0:df:41:39:1f:76:fd:3c:94:1f:12:1b:6e:7b:99
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c1:a9:cc:36:f3:96:6d:c8:29:7f:96:a1:b4:7d:d6:77:5e:1b:9b:cb
Fingerprint (sha256): eb:95:7b:3c:7e:55:d4:68:74:7e:3b:22:17:63:bb:19:51:e1:1c:be:d0:78:f2:d4:18:ad:a5:78:7d:bd:37:5d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate a.api.permutive.app

59

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for a.api.permutive.app

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

a.api.permutive.app
api-over-cname-poc.prmtv.io
permutive.220triathlon.com
permutive.admiddleeast.com
permutive.architecturaldigest.com
permutive.arstechnica.com
permutive.bbcgoodfood.com
permutive.bikeradar.com
permutive.bonappetit.com
permutive.classical-music.com
permutive.cntraveler.com
permutive.cntravellerme.com
permutive.countryfile.com
permutive.cyclingplus.com
permutive.discoverwildlife.com
permutive.ekbbmagazine.co.uk
permutive.epicurious.com
permutive.gardenersworld.com
permutive.gardensillustrated.com
permutive.glamour.com
permutive.gq-magazin.de
permutive.gq-magazine.co.uk
permutive.gq.com
permutive.gq.com.mx
permutive.gq.com.tw
permutive.gqindia.com
permutive.gqitalia.it
permutive.gqjapan.jp
permutive.gqmagazine.fr
permutive.historyextra.com
permutive.hitched.co.uk
permutive.homesandantiques.com
permutive.kbbdaily.com
permutive.lacucinaitaliana.com
permutive.madeformums.com
permutive.mbuk.com
permutive.newyorker.com
permutive.olivemagazine.com
permutive.pitchfork.com
permutive.radiotimes.com
permutive.revistagq.com
permutive.self.com
permutive.skyatnightmagazine.com
permutive.teenvogue.com
permutive.them.us
permutive.vanityfair.com
permutive.vogue.co.jp
permutive.vogue.co.uk
permutive.vogue.com
permutive.vogue.com.tw
permutive.vogue.de
permutive.vogue.es
permutive.vogue.fr
permutive.vogue.in
permutive.vogue.it
permutive.vogue.mx
permutive.voguebusiness.com
permutive.youandyourwedding.co.uk
permutive.yourhomestyle.uk

Other certificates including the domain name permutive.app

(limited to 100 certificates)
a.api.permutive.app
c.api.permutive.app
b.api.permutive.app
a.api.permutive.app
api.permutive.com
amp.permutive.com
b.api.permutive.app
*.partner.permutive.app
c.api.permutive.app
c.api.permutive.app
a.api.permutive.app
amp.permutive.com
permutive.app
amp.permutive.com
permutive.app
permutive.app
b.api.permutive.app
a.api.permutive.app
b.api.permutive.app
*.partner.permutive.app
c.api.permutive.app
a.api.permutive.app
permutive.app
permutive.app
c.api.permutive.app
c.api.permutive.app
b.api.permutive.app
b.api.permutive.app
amp.permutive.com
c.api.permutive.app
c.api.permutive.app
permutive.app
a.api.permutive.app
a.api.permutive.app
c.api.permutive.app
a.api.permutive.app
a.api.permutive.app
permutive.app
api.permutive.com
amp.permutive.com
*.partner.permutive.app
permutive.app
a.api.permutive.app
permutive.app
b.api.permutive.app
c.api.permutive.app
c.api.permutive.app
api.permutive.com
api.permutive.com
b.api.permutive.app
a.api.permutive.app
api.permutive.com
*.partner.permutive.app
a.api.permutive.app
*.partner.permutive.app
a.api.permutive.app
a.api.permutive.app

Certificate

The complete raw certificate details for a.api.permutive.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBUTb6cpwhg2BD75iFt7
ZplAM8eiOAtVrKjLwFHW0kiQd45tJ8F2oQL3F3nQLqy96kjvtrtcpkhMhaTqP8LQ
x8BcODAEOY404paWupFV7JJOnLuZlf1tbpoUli5A+iOMoaewjqQQf95u1iVgWYkW
z9Np3E0YkB9YDeR+DYl4giTsAqhsKZd30HqluanjCbxwDwSSQRgxmgEwXVQ376wh
VnlTYILANqB+gUMWqQ0bc8eLKKrnkEMwHLiUjEUPkANsZzRv+8XgzcGZyvrjNhek
Lbl4JDRfKLwPdP0sWVjkuwL0QUiTNzuSQ7UrMDC+xhhJTGTC1FeCeDi/UaJ8omO/
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325900128819373312947115085382474447707287
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 16:32:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-23 16:32:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'a.api.permutive.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24753100698051909327487999548541642358292254407377709798798306043749012654168038295888434458395169283166622236361549597539286299346251874898545379593290623211187048227040205015988489964302616412723103973032790502683454957924517750482863831152923243555156404478423471554723573740436352995786995212435129977998730181019565748908785344400155132331545454136495394631847405733100302432823418382063490292520335165006931052817764325862232223996053113541852469987010199846124819421189415442396345639876382080153507832391095368589372948298613897337781989460795812133082777638049894763942224534433521028325398547328052481998641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f79473ab7c0df41391f76fd3c941f121b6e7b99
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1517 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.api.permutive.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-over-cname-poc.prmtv.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.220triathlon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.admiddleeast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.architecturaldigest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.arstechnica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.bbcgoodfood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.bikeradar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.bonappetit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.classical-music.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.cntraveler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.cntravellerme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.countryfile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.cyclingplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.discoverwildlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.ekbbmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.epicurious.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.gardenersworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.gardensillustrated.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.glamour.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.gq-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.gq-magazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.gq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.gq.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.gq.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.gqindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.gqitalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.gqjapan.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.gqmagazine.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.historyextra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.hitched.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.homesandantiques.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.kbbdaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.lacucinaitaliana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.madeformums.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.mbuk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.newyorker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.olivemagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.pitchfork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.radiotimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.revistagq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.self.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.skyatnightmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.teenvogue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.them.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.vanityfair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.vogue.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.vogue.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.vogue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.vogue.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.vogue.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.vogue.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.vogue.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.vogue.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.vogue.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.vogue.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.voguebusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.youandyourwedding.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permutive.yourhomestyle.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e76ab815f0000040300473045022100dfdf8e152de1ba51e9216b5cf84a5d6663b963a28db8da2ec19a7e190973e537022079635714e3ceee498d0bd81f389cd45aff47f06f3d714780486022d8bfcf0c72007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e76ab816d0000040300483046022100c46d87b2af6e794decf8c0d8c510c562eb06c7bb24b4fc5d43a75543ee9dcf5902210086858cedb4a41febd8d89b2ea9b28032b2f6b4bf3fc5aadd258512d53a0067af
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00244b3e725eaaa308468df63d7d7b59c84cbefaf9aa37adeb24ea4c83535058146f8086330eeef920c2a2a53bdb0068172540c7f2159a61d1a90253b378cd5b25b52b6421ffcdece35e800b936533d474e5e629ed83657666973acc3c8426ea6bfe13bad433ab92e1d791f8f23d66e5c6354cc771dc2e56eb977fc3f7fc3239a8cb22bd3e9b0b2f56c6f18d59441633719d608864d12cca7fc05598054dc3c9e47229a00885a3362aad0b91cb31e39317690730542a0e04cb81ea4ceabaea27c50b067f3ca676b3fc70e26b9e86c36092367852bcb897293548ade390b90f51a7280eccf7b99ff952260f53a04bc9959a9eaec82db9cd7c537f5d5fb5d1ff2aee