*.gmp-public.ksvc.hekatoncheir.dena.ai
Issued by R3
About this certificate
This digital certificate with serial number 03:f5:3f:a7:cf:eb:9f:93:7c:95:8a:1a:fc:9f:ed:15:2b:8a was issued on by Let's Encrypt.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.gmp-public.ksvc.hekatoncheir.dena.ai
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:f5:3f:a7:cf:eb:9f:93:7c:95:8a:1a:fc:9f:ed:15:2b:8aSerial Number (int): 344790650385347281068342316360954772007818
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: d2:7b:c7:3c:d1:59:a9:fd:b3:32:34:e8:1c:d6:3c:30:21:97:b3:0e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): e8:00:9d:bf:4e:1b:79:07:50:d3:a6:07:ce:a6:a2:42:58:b9:7c:ab
Fingerprint (sha256): fa:9b:97:aa:32:c1:cf:44:b6:56:f7:65:3c:73:41:23:b6:4a:56:24:e6:22:c4:7e:41:b2:e4:8c:2c:05:d0:d4
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate *.gmp-public.ksvc.hekatoncheir.dena.ai
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.gmp-public.ksvc.hekatoncheir.dena.ai
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.gmp-public.ksvc.hekatoncheir.dena.ai
Other certificates including the domain name dena.ai
(limited to 100 certificates)
prazskabojovka.cz
artisanemenu.triggersplus.com
web.wabroadcast.in
tribuevolucion.turnosweb.app
dev.dena.ai
*.kube-public.ksvc.hekatoncheir.dena.ai
*.pococha-cs-image.ksvc.stg-hekatoncheir.dena.ai
*.configconnector-operator-system.ksvc.stg-hekatoncheir.dena.ai
dena.ai
chat.abdobeh.com
dena.ai
nota.dena.ai
dena.ai
www.preedah.com
dena.ai
*.voice-pococha-silence-detection.ksvc.stg-hekatoncheir.dena.ai
dolanc.xyz
shin04.a4f0.ds-competition.dena.ai
theoasis.ai
www.denegociants.com
s-voice-api.dena.ai
*.cnrm-system.ksvc.stg-hekatoncheir.dena.ai
*.grafana.ksvc.stg-hekatoncheir.dena.ai
olo.live
padrone.ch
*.configconnector-operator-system.ksvc.hekatoncheir.dena.ai
dena.ai
*.kube-system.ksvc.hekatoncheir.dena.ai
www.vertybiumedis.lt
dolanc.xyz
multris.akleiman.dev
greekbeatsofficial.com
cosmos.gofloaters.com
litovski.info
www.dojobots.io
www.sunflorentalz.com
staging.nota.dena.ai
app.calendoo.net
www.igorianba.com
*.model-serving-system.ksvc.dev-hekatoncheir.dena.ai
api-fontgraphy.dena.ai
newsite.dena.ai
argocd.hekatoncheir.dena.ai
nota.dena.ai
sirah-collab.arrijal.com
frugalengineering.in
brainleadercompany.com
dena.ai
myfuel.network
dev.dena.ai
*.serviceaccount-controller-system.ksvc.hekatoncheir.dena.ai
*.gmp-system.ksvc.stg-hekatoncheir.dena.ai
houdini.io
staging.jessie.ai
ezlang.org
url.ashwin.engineer
api-fontgraphy.dena.ai
mrscotty.app
www.alanaaragao.com
*.internal-voice.ksvc.dev-hekatoncheir.dena.ai
*.kube-node-lease.ksvc.stg-hekatoncheir.dena.ai
gmflx.app
vianahousing.pt
live.edge.topia.tv
sign.tblmedical.no
dena.ai
engineers-blog.dena.ai
thenerdlabs.dev
*.kourier-system.ksvc.stg-hekatoncheir.dena.ai
*.knative-serving.ksvc.stg-hekatoncheir.dena.ai
pococha-cs-not-performance.hekatoncheir.dena.ai
testing.austta.com
nota.dena.ai
*.cert-manager.ksvc.stg-hekatoncheir.dena.ai
dev.dena.ai
data.letsrebelle.com
*.cnrm-system.ksvc.hekatoncheir.dena.ai
medaxpert.de
ifindufly.com
sb-d36d2f7b-frontend.dena.ai
*.model-serving-system.ksvc.stg-hekatoncheir.dena.ai
*.default.ksvc.stg-hekatoncheir.dena.ai
connect.entango.dev
www.preedah.com
www.rgcrane.no
www.eliteconstructionsolutions.net
tk.nota.dena.ai
*.gmp-public.ksvc.stg-hekatoncheir.dena.ai
pakacrash.ke
analytics.thisthatapp.com
vipulasri.com
cchirag.com
*.kube-node-lease.ksvc.hekatoncheir.dena.ai
azmm-id-testing.input4you.be
nota.dena.ai
*.mobage-avatar.ksvc.hekatoncheir.dena.ai
xn----7sbc0btdgeew.xn--p1ai
*.default.ksvc.stg-hekatoncheir.dena.ai
dena.ai
newsite.dena.ai
artisanemenu.triggersplus.com
web.wabroadcast.in
tribuevolucion.turnosweb.app
dev.dena.ai
*.kube-public.ksvc.hekatoncheir.dena.ai
*.pococha-cs-image.ksvc.stg-hekatoncheir.dena.ai
*.configconnector-operator-system.ksvc.stg-hekatoncheir.dena.ai
dena.ai
chat.abdobeh.com
dena.ai
nota.dena.ai
dena.ai
www.preedah.com
dena.ai
*.voice-pococha-silence-detection.ksvc.stg-hekatoncheir.dena.ai
dolanc.xyz
shin04.a4f0.ds-competition.dena.ai
theoasis.ai
www.denegociants.com
s-voice-api.dena.ai
*.cnrm-system.ksvc.stg-hekatoncheir.dena.ai
*.grafana.ksvc.stg-hekatoncheir.dena.ai
olo.live
padrone.ch
*.configconnector-operator-system.ksvc.hekatoncheir.dena.ai
dena.ai
*.kube-system.ksvc.hekatoncheir.dena.ai
www.vertybiumedis.lt
dolanc.xyz
multris.akleiman.dev
greekbeatsofficial.com
cosmos.gofloaters.com
litovski.info
www.dojobots.io
www.sunflorentalz.com
staging.nota.dena.ai
app.calendoo.net
www.igorianba.com
*.model-serving-system.ksvc.dev-hekatoncheir.dena.ai
api-fontgraphy.dena.ai
newsite.dena.ai
argocd.hekatoncheir.dena.ai
nota.dena.ai
sirah-collab.arrijal.com
frugalengineering.in
brainleadercompany.com
dena.ai
myfuel.network
dev.dena.ai
*.serviceaccount-controller-system.ksvc.hekatoncheir.dena.ai
*.gmp-system.ksvc.stg-hekatoncheir.dena.ai
houdini.io
staging.jessie.ai
ezlang.org
url.ashwin.engineer
api-fontgraphy.dena.ai
mrscotty.app
www.alanaaragao.com
*.internal-voice.ksvc.dev-hekatoncheir.dena.ai
*.kube-node-lease.ksvc.stg-hekatoncheir.dena.ai
gmflx.app
vianahousing.pt
live.edge.topia.tv
sign.tblmedical.no
dena.ai
engineers-blog.dena.ai
thenerdlabs.dev
*.kourier-system.ksvc.stg-hekatoncheir.dena.ai
*.knative-serving.ksvc.stg-hekatoncheir.dena.ai
pococha-cs-not-performance.hekatoncheir.dena.ai
testing.austta.com
nota.dena.ai
*.cert-manager.ksvc.stg-hekatoncheir.dena.ai
dev.dena.ai
data.letsrebelle.com
*.cnrm-system.ksvc.hekatoncheir.dena.ai
medaxpert.de
ifindufly.com
sb-d36d2f7b-frontend.dena.ai
*.model-serving-system.ksvc.stg-hekatoncheir.dena.ai
*.default.ksvc.stg-hekatoncheir.dena.ai
connect.entango.dev
www.preedah.com
www.rgcrane.no
www.eliteconstructionsolutions.net
tk.nota.dena.ai
*.gmp-public.ksvc.stg-hekatoncheir.dena.ai
pakacrash.ke
analytics.thisthatapp.com
vipulasri.com
cchirag.com
*.kube-node-lease.ksvc.hekatoncheir.dena.ai
azmm-id-testing.input4you.be
nota.dena.ai
*.mobage-avatar.ksvc.hekatoncheir.dena.ai
xn----7sbc0btdgeew.xn--p1ai
*.default.ksvc.stg-hekatoncheir.dena.ai
dena.ai
newsite.dena.ai
Certificate
The complete raw certificate details for *.gmp-public.ksvc.hekatoncheir.dena.ai in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEJjCCAw6gAwIBAgISA/U/p8/rn5N8lYoa/J/tFSuKMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MDIyMDEzMThaFw0yNDA3MDEyMDEzMTdaMDExLzAtBgNVBAMM JiouZ21wLXB1YmxpYy5rc3ZjLmhla2F0b25jaGVpci5kZW5hLmFpMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07onVBExTk72rAEWCuwF79UrvFYAMhbu c05tO9FVDXWET6zbwo0TT2FnQgN7JrEqth5YeP444t334IZ+DvodqLLtT8++T19O Q306MVlguVFQKPc7R4YtP7OsLvzEi8pCcpIJY+3TwK7GNCNsFieTl9dOwGP63gFR 1denBd0GUhdAbDXUz7+8RQQ3Y6AqqyJNo/rkbBeA8XkZywrHmLUzxX9JJw4y6J8R iHyDI0sYdYoLh/gOy9ruzRHj+gHrTc60Ily7MBEXZQS2yxtOrvgxlreAsvgjZYTA bRNY79deAUXbaznsp8Amsng0ncWvGTwGqHx8Fa2R/56totZ02M0NNQIDAQABo4IB NTCCATEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTSe8c80Vmp/bMyNOgc1jwwIZez DjAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJ MEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcw AoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzAxBgNVHREEKjAogiYqLmdtcC1wdWJs aWMua3N2Yy5oZWthdG9uY2hlaXIuZGVuYS5haTATBgNVHSAEDDAKMAgGBmeBDAEC ATATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIWbM7o1W GwQEr3x1NNWhcDHN2JkwwS/uNGW7yqFiz9XkBupZ/Lx+72p0O5CnCrrBKb4Ek853 MmiYpDu2v+QdVgu+5P0zPSUgpkdR0z9ObzPweWSVzHJ7rt2bHe3wTGgr9Pee0Gvp 71xj0Qk94AOiLEbVZMjq2ofOpGezBA427OfQuYWQe4jse7KwWyensTGsc6kGvTd5 iv2Qn2cn3ezFyjlgFBbjfbnUkCJJ8sbcxl0BZ7OgGwkAyECgv72IeH7jXxIHJTH/ MIRTXzL/wL+E0YlcGtXOnmEwtTQRmL40OOzCxJ239mKPm07OO+1ULciwPJsEATM/ Tu8fjWrQ8yiz8A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07onVBExTk72rAEWCuwF 79UrvFYAMhbuc05tO9FVDXWET6zbwo0TT2FnQgN7JrEqth5YeP444t334IZ+Dvod qLLtT8++T19OQ306MVlguVFQKPc7R4YtP7OsLvzEi8pCcpIJY+3TwK7GNCNsFieT l9dOwGP63gFR1denBd0GUhdAbDXUz7+8RQQ3Y6AqqyJNo/rkbBeA8XkZywrHmLUz xX9JJw4y6J8RiHyDI0sYdYoLh/gOy9ruzRHj+gHrTc60Ily7MBEXZQS2yxtOrvgx lreAsvgjZYTAbRNY79deAUXbaznsp8Amsng0ncWvGTwGqHx8Fa2R/56totZ02M0N NQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 344790650385347281068342316360954772007818 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 20:13:18 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 20:13:17 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.gmp-public.ksvc.hekatoncheir.dena.ai' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26728078122347318268712839077285509153412766733167671672903214362062192366051099904205665077192489382815217797690597147275708009677153382664939878001959544572621837606429331680717237612802015508524608644470392721010171070607639759626028853914134117278458611489028367510044650589631125077957325878129869596972890420983788090576608768118459761489813596577460218881521544258978794511946169632736133308343320051487685575489187810795349012177984297254098633582942600914593952684480878990470070320362269472803129843919178028059768359015136492016105763653215617985181780461736638072947579715329720448492803678594208874958133 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d27bc73cd159a9fdb33234e81cd63c302197b30e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gmp-public.ksvc.hekatoncheir.dena.ai' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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