www.sportsground.com

Issued by R3

About this certificate

This digital certificate with serial number 04:bc:53:35:5e:0d:ef:1e:a5:68:e7:83:e1:f6:23:e5:53:b7 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.sportsground.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:bc:53:35:5e:0d:ef:1e:a5:68:e7:83:e1:f6:23:e5:53:b7
Serial Number (int): 412532831731211540903115311942719190160311
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e9:cf:ca:5c:9b:2e:4a:09:25:26:61:aa:90:d9:08:a2:ba:0d:94:1c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a7:76:dc:46:ab:89:2c:b6:9a:0c:94:af:bf:aa:ac:9c:c4:a1:84:a6
Fingerprint (sha256): f2:7a:65:3e:75:ac:3a:61:ed:50:15:ff:7c:d1:10:4b:31:5a:27:e4:ec:4b:7b:8c:9c:00:62:9b:d5:22:18:92

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.sportsground.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sportsground.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sport.rosmini.school.nz
www.arra.org.nz
www.awateregolfclub.co.nz
www.blokarthb.co.nz
www.burwoodafc.co.nz
www.canoeslalomnz.org.nz
www.canterburyunited.co.nz
www.capitalbaseball.co.nz
www.carltonjuniorsrugby.co.nz
www.cornwallcricket.co.nz
www.darfieldcricket.co.nz
www.foxtongolf.co.nz
www.gksports.co.nz
www.glenviewsoccer.co.nz
www.helensvillerugby.co.nz
www.hockeymanawatu.org.nz
www.howicknetball.org.nz
www.katikatifc.co.nz
www.kaumatuatc.org.nz
www.kbhs.school.nz
www.mainlandfootball.co.nz
www.maristinvercargill.co.nz
www.moonshinetrail.co.nz
www.mosgielafc.co.nz
www.nhrra.co.nz
www.norths.co.nz
www.northsrugby.co.nz
www.nzfootball.co.nz
www.papakuranetball.nz
www.papakuranetball.org.nz
www.papanuiredwoodafc.co.nz
www.papatoetoeunited.co.nz
www.parklandsunited.co.nz
www.pauanuilifeguards.org.nz
www.pcbasketballclub.co.nz
www.rivertongolf.co.nz
www.royaloakbowls.co.nz
www.southlandfootball.org.nz
www.speedway.co.nz
www.sportcanterbury.org.nz
www.sportnorthland.co.nz
www.sportnorthland.nz
www.sportsground.com
www.sporttasman.org.nz
www.sydenhamrugby.co.nz
www.taradalefootball.org.nz
www.thesalmonrun.nz
www.ths.school.nz
www.worldseriescricket.co.nz
www.wsra.nz
www.wssfa.nz

Other certificates including the domain name sportsground.com

(limited to 100 certificates)
www.nelsoncarclub.co.nz
www.blenheimgolfclub.co.nz
www.sportsground.com
sporty.co.nz
support.sportsground.com
www.tabletennis.org.nz
sporty.co.nz
www.sportsground.com
support.sportsground.com
www.sportsground.com
support.sportsground.com
northcanterburyrugby.co.nz
support.sportsground.com
www.nztua.com
www.sportsground.com
www.schoolground.com
support.sportsground.com
support.sportsground.com
hastings-central.school.nz
ultrarunner.org.nz
www.sportsground.com
www.oacnz.org
www.sportsground.com
sporty.co.nz
aafl.co.nz
support.sportsground.com
sporty.co.nz
support.sportsground.com
sporty.co.nz
northharbourtag.co.nz
trenthamrifleclub.co.nz
www.sportsground.com
support.sportsground.com
support.sportsground.com
sporty.co.nz
aucklandmarist.co.nz
support.sportsground.com
www.wmsc.org.nz
support.sportsground.com
support.sportsground.com
support.sportsground.com
lucknow.school.nz
www.badmintonhb.co.nz
pioneerbasketballclub.co.nz
www.melrosetargetshooting.co.nz
www.sportsground.com
basketballtaranaki.co.nz
sporty.co.nz
www.schoolground.com

Certificate

The complete raw certificate details for www.sportsground.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudY4cdT7oq2KXfdwaG8I
KuWn9eNtWSzT4CwWQWG2RZfMW6YPfA80uYiJNGeh7TUglpeVDItgxLkjHmiNbODI
iEL2ClyVWiAuvdaE0L0UMWx0xerUPvkQ6GgIfc+DG8sSeb5BZfu80XlRTHHlKolz
DEcLCf35XoZ1do4mANQmzDpu+iuDd886osKcOHbdDFrXs1nZb53rKRgde82UOUDU
GW4nAijjqNwsU3VcYfF57iNVYE9/+r2hQgiqY12nnxVW7hbNeWeGvpvUUOo83dZL
y8X5xj2jtPSfCmTpb6auix1dLJEjxbYUvXESpVj3NZWEElvNP8wN0bQtjKThHYLP
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 412532831731211540903115311942719190160311
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 17:34:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-08 17:34:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sportsground.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23459722477939786111848621735270483690638275986908465099820451031589637645262937626797074461870821512692653805381334458745336640788198735067369598881012824631071652719164158778773070354352835380030863637316629298010845705030759145485812774001807426808716159011596512279630304175381146481236006434631372237458672470619426797249963606126381760632545679789524674716394990801495678889831504537857504284109119584739912187805194702842124569663080487406836017969439081158476417477127575243682283758468461215760140070448345155132900986863002847786606987058067075991425899436930687911378503102082270196803273940158315969564557
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e9cfca5c9b2e4a09252661aa90d908a2ba0d941c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1249 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sport.rosmini.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awateregolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blokarthb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burwoodafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canoeslalomnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburyunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capitalbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carltonjuniorsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornwallcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.darfieldcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foxtongolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gksports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenviewsoccer.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helensvillerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeymanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howicknetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.katikatifc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaumatuatc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kbhs.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainlandfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristinvercargill.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moonshinetrail.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mosgielafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhrra.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norths.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakuranetball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakuranetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papanuiredwoodafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papatoetoeunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parklandsunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pauanuilifeguards.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rivertongolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royaloakbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.speedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportcanterbury.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportnorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportnorthland.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporttasman.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sydenhamrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taradalefootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesalmonrun.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ths.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldseriescricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wsra.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wssfa.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cef811c6600000403004730450221008ececef80d56bdf8aae4fae6a250d7ef00f0bd76c95cadb5541bc23f0710b367022008c57ad870379fdcb6dac9712858906601d86ee07355d2adf7a8ff400ecc2e25007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018cef811d0f000004030047304502204ef8d593d446262d25d7bbd225e5953e15d3ade1aa54193fd1eb1094decbf5b5022100eb30e6e40b9d6ebac9c5d0d2616cb36f8dccb24c8cf2325e111181b047a340fe
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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