wepawet.cs.ucsb.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b3:a3:ac:56:5c:16:72:64:30:ec:23:59:37:13:5a:d5:f4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=wepawet.cs.ucsb.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b3:a3:ac:56:5c:16:72:64:30:ec:23:59:37:13:5a:d5:f4
Serial Number (int): 322464960464084498003705769755799132493300
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b1:96:64:d5:74:d6:20:f5:73:24:07:6e:d4:87:ee:82:86:91:a0:40
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 88:2f:8f:33:04:a5:b3:15:b0:16:a1:93:5b:ec:5c:eb:80:4f:23:1e
Fingerprint (sha256): 00:0c:9a:cf:c1:bc:63:6d:cf:4e:4c:5b:cc:56:89:86:d7:12:e9:0a:e0:6c:10:54:f6:9c:7a:56:b6:5a:51:20

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate wepawet.cs.ucsb.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wepawet.cs.ucsb.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wepawet.cs.ucsb.edu

Other certificates including the domain name ucsb.edu

(limited to 100 certificates)
flour.ece.ucsb.edu
physics.ucsb.edu
wepawet.cs.ucsb.edu
5665833682468864-fe1.pantheonsite.io
hrsweb-kx.housing.ucsb.edu
bic03.bic.ucsb.edu
carpepm.almonds.com
idm.my.ucsb.edu
ictf.cs.ucsb.edu
us.prod.campusgroups.com
github.nceas.ucsb.edu
5715605172781056-fe1.pantheonsite.io
leadership.sa.ucsb.edu
learning.nceas.ucsb.edu
5719721496281088-fe4.pantheonsite.io
studentvisa.test.sa.ucsb.edu
5729821648748544-fe1.pantheonsite.io
securessl-pst1.tessituranetworkhost.com
www.csmd.ucsb.edu
ucdc.edu
5680534013345792-fe1.pantheonsite.io
us.prod.campusgroups.com
rotabullstatus.com
www.ece.ucsb.edu
nartc.fcm.arizona.edu
5704093720903680-fe2.pantheonsite.io
api-status.360cities.net
5762637883244544-fe3.pantheonsite.io
ucen.ucsb.edu
5661530653720576-fe2.pantheonsite.io
5715605172781056-fe1.pantheonsite.io
api-status.360cities.net
math.ucsb.edu
5703789046661120-fe2.pantheonsite.io
aurora.nceas.ucsb.edu
www.ascidiancenter.ucsb.edu
microscopy.nri.ucsb.edu
5665370564198400-fe2.pantheonsite.io
donelan.faculty.writing.ucsb.edu
history.ucsb.edu
checkrstatus.com
eci.ucsb.edu
support.nceas.ucsb.edu
5755164371714048-fe3.pantheonsite.io
5654961308303360-fe2.pantheonsite.io
housing.ucsb.edu
info.resnet.ucsb.edu
secure.identity.ucsb.edu
www.mcdb.ucsb.edu
aurora.nceas.ucsb.edu
banknorthstatus.mambu.com
gibber.cc
webmail.sa.ucsb.edu
banking-business-review.com
barc.isc.ucsb.edu
paymentsolutions-status.shijicloud.com
cdn-test.battlefields.org
daylight-header-293093155.eks.dld.library.ucsb.edu
test.eis.uw.edu
dev.nceas.ucsb.edu
admissions.ext-prod.sa.ucsb.edu
5665833682468864-fe1.pantheonsite.io
ucen.ucsb.edu
5636953047302144-fe4.pantheonsite.io
citeak.multidevcom.uaf.edu
5720605454237696-fe1.pantheonsite.io
cowbird.lifesci.ucsb.edu
pathodstest.systems.isc.ucsb.edu
www.cnsi.ucsb.edu
5701569219657728-fe1.pantheonsite.io
web.physics.ucsb.edu
5715605172781056-fe1.pantheonsite.io
5715605172781056-fe1.pantheonsite.io
admin7status.brinkpos.net
graylog.library.ucsb.edu
5762637883244544-fe3.pantheonsite.io
webextracts.test.sa.ucsb.edu
helios.geog.ucsb.edu
studentvisa.test.sa.ucsb.edu
www.arch.cs.ucsb.edu
scl.ece.ucsb.edu
5696605713858560-fe4.pantheonsite.io
philosophy.ucsb.edu
ucen.ucsb.edu
banking-business-review.com
apptcha.seclab.cs.ucsb.edu
anubis.cs.ucsb.edu
5666823336886272-fe4.pantheonsite.io
5715605172781056-fe1.pantheonsite.io
paymentsolutions-status.shijicloud.com
santacruz.nrs.ucsb.edu
scalefundercert.net
chns120.courseresource.yale.edu
5735393697726464-fe2.pantheonsite.io
5738369707409408-fe3.pantheonsite.io
marc.ucsb.edu
5706646944743424-fe4.pantheonsite.io
5703789046661120-fe2.pantheonsite.io
5696605713858560-fe4.pantheonsite.io
208.lsnc.net

Certificate

The complete raw certificate details for wepawet.cs.ucsb.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgISA7OjrFZcFnJkMOwjWTcTWtX0MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMDQwOTMxMzRaFw0y
MDA0MDMwOTMxMzRaMB4xHDAaBgNVBAMTE3dlcGF3ZXQuY3MudWNzYi5lZHUwggIi
MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC4QpaawoQU43+VB6oVUFqlUY5Q
Ef1aDAYcRM6ZwUQCTuNxR/dzAVycXdBn1uyuMu0QwJSx5wajMP5iRib4E16IWqWQ
f6ZMj9NfgEeUYjLivhijBGK79ZIWIZjCZDaSKcF/EQT1hzOYBFOReoMCnPBhlQXu
wXg6xo0na49pJDTx3iSyhTUZLftbTKJbYM8rHi0Mz81tmw5pbccPBomeTekax07x
ASzyHB7MHO/F3zUCz0nwCs6KMDhulu1Szbn6UrLCBuYyf2GyH1jpkYXOn43oj0KC
PJfBqFuQyH5O6RrtvmCOB/MvcwX6X8yUjwAaxoPhn3BvonHliOEM1jeYHI67HlON
wTJeL1qeqb66I23JT2Vg6KBXXOPqrDHdqF2rkOAYx18ykjo04/pkbLSXaWMFRQMu
AAgL4btsNYsY7RK6qpdfnEeE0XxE8v+lfr89XcP8UAzOZWhWiqDljlDIjq7DGBEj
LvaLnFMAWlv/3rxIr4NVo3SeGBUjEUawJBbZnh8wji0jI8ch+leB8nWzc04cTn6g
KX0wEE5pl27Nb2yiLmws9enrqUee5w3+5ErqAtTzO52yQiMySv2PpgitQye1fzLm
kaCgoyiUU6Xniac5oNRDISmyTvoTlBnP4RPiti4IoCfceWfXdUB44CDIF5FbUse3
qtA+1EHyH/1x/whu3QIDAQABo4ICZjCCAmIwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW
BBSxlmTVdNYg9XMkB27Uh+6ChpGgQDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem
RWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw
LmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0
LmludC14My5sZXRzZW5jcnlwdC5vcmcvMB4GA1UdEQQXMBWCE3dlcGF3ZXQuY3Mu
dWNzYi5lZHUwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm
BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggECBgorBgEE
AdZ5AgQCBIHzBIHwAO4AdQCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQ
XgAAAW9wHDWGAAAEAwBGMEQCICx0mfYe43I+I6sCPxwLVVrfzGgFdbkFl9PuL7Kg
i3UcAiA4BQ0tC31iz+rwn3P9pokYoQMIa5zcUEB3sv/sowuoDgB1AG9Tdqwx8DEZ
2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABb3AcNbQAAAQDAEYwRAIgGFMz5Yns
8GpQs0GVf9m2y8fnh34bDcGRPmsYSNN86GICIGe1w8vX3DjmVRGFpQukAW6IcIYh
PGcEE+MbQBEQ8dQAMA0GCSqGSIb3DQEBCwUAA4IBAQBfKF9Mghd/ahdIOZcjEnMD
1c9HB79b/XYelfSsX2UjrSihO8LCZCO8SJUJl2KpdUJhFGnvuLvWzOlKsQ1TD1Oi
d0rLxZTWBloov8pc/h5wRGJ6dBQRln2LiZOF8P0eisuHM6hU2mQ36+R0GR6p9J+T
PxIZYfK86f7nRihxwjO2frdHHhKRZTg3QIP6bIzrx00UC9Snc3oyUKKJonSbbX2k
eAk3OR/pXjG9+50OZ428ia+Kw85Garo54DVhv/Tk5bTI+aoJEbChv4NfBKHDjKyQ
AfQAsbp8AwqFTadqrdfhKmE4wpodaoR8ZT17H7DMIbyYHL9sxivkWaJv/pmj9L1Z
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322464960464084498003705769755799132493300
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-04 09:31:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-03 09:31:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wepawet.cs.ucsb.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 751715666948519778956154103077601162146810320279601959820785089613358242237694927611379290127767336274387229213418934613590083165786914826211595463730619664842107730119313527409132869898285174350921047067206950702907086624929894108392227939498998163791312569109819458510764029655695048487210979411927911968462070076538763466620932585236718275858829877154404714126784746401071235914815668040655491392630864173106386697516148232061916957707607684502885998585176567634996401991206218598290983079027994772486417129053423961955926053550735675782220151484352044548008055818376503244700926129029376829524166065458666075915788364547475869442166334621312377850570786180810310094795573931863714170040392467315927382863637890171751575192762076973878942596601199776650544029369170286980445781925645621376770093210538804593698031641917429539636379612913035339490764488230901124051504152097541598641134733915707921089205720932930541605934011455131840731427656337618852493443383623732108686188863290026649163931567882944750181927888252367928568105595769283321448377492638557639597535709446843707618823875662010859305647198331475838962098253248725283734185172881366571663289840207955175094539109899477555401995268546341362079508977290624126343999197
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b19664d574d620f57324076ed487ee828691a040
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wepawet.cs.ucsb.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f701c3586000004030046304402202c7499f61ee3723e23ab023f1c0b555adfcc680575b90597d3ee2fb2a08b751c022038050d2d0b7d62cfeaf09f73fda68918a103086b9cdc504077b2ffeca30ba80e0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f701c35b400000403004630440220185333e589ecf06a50b341957fd9b6cbc7e7877e1b0dc1913e6b1848d37ce862022067b5c3cbd7dc38e6551185a50ba4016e887086213c670413e31b401110f1d400
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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