marvin.byu.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:65:c1:0e:73:0b:b4:2b:52:5e:dc:17:c7:78:f9:6c:b7:10 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=marvin.byu.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:65:c1:0e:73:0b:b4:2b:52:5e:dc:17:c7:78:f9:6c:b7:10
Serial Number (int): 295961992883042406882890764958851954161424
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7b:40:c5:c4:0d:94:ee:93:8c:83:31:7b:04:7d:ce:84:97:ad:24:25
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ad:1b:5c:3a:1c:08:6c:f8:d4:d7:46:7c:84:dc:89:d9:aa:23:3f:5a
Fingerprint (sha256): 01:48:16:93:e0:dd:6a:49:3d:f1:9b:33:d3:14:77:6f:03:c9:12:e8:ec:ca:11:52:8b:1e:67:ad:c7:25:f5:ba

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate marvin.byu.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for marvin.byu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

marvin.byu.edu

Other certificates including the domain name byu.edu

(limited to 100 certificates)
mentoring.byu.edu
cdt.byu.edu
ifip.byu.edu
is.byu.edu
*.byu.edu
emsweb-dev.byu.edu
byu-oit-swat-trn.amazon.byu.edu
elcwriter.byu.edu
civatthemoa.byu.edu
print-drivers.byu.edu
byu7.domains.byu.edu
homecoming.byu.edu
arts-sandbox.cfacarts.byu.edu
jdtobe.byu.edu
helium13-idrac.byu.edu
crashplan.byu.edu
sup.osc.byu.edu
magiccvs.byu.edu
*.sim-dev.byu.edu
ysa49th.byu.edu
fhtl.byu.edu
titanium12-idrac.byu.edu
byu-oit-paymentsystems-dev.amazon.byu.edu
spacecraft.byu.edu
dev.byu.edu
phdprep.byu.edu
humanities.byu.edu
www.idealabs.byu.edu
humanities.byu.edu
cpcalendars.byucougarcapital.org
jpf.byu.edu
humwp-farm.byu.edu
employee.osc.byu.edu
corpusconference.byu.edu
oare.byu.edu
scholarsarchive.byu.edu
ifip.byu.edu
training.titleix.byu.edu
uconnectlabs.com
jrcb-event-scheduler.byu.edu
test.byu-org-trn.amazon.byu.edu
byu-dept-hawaii-dev.amazon.byu.edu
marvin.byu.edu
bluto.cs.byu.edu
loginerror.byu.edu
avi.fhtl.byu.edu
enclave.byu.edu
panda.byu.edu
*.dev-oit-byu.amazon.byu.edu
byu.edu
byushowcase2017.com
jrcb-cdn.byu.edu
vita.byu.edu
hbc.byu.edu
sebulba.cs.byu.edu
magiccvs.byu.edu
zappala.byu.edu
newsnet.byu.edu
uconnectlabs.com
rocket.byu.edu
vetfinder.fhtl.byu.edu
ifootball.byu.edu
gestudy.byu.edu
drupalebc.embc.byu.edu
byu8.domains.byu.edu
byu8.domains.byu.edu
aphasia.byu.edu
elc.byu.edu
osc.byu.edu
aluminum03-esxi.byu.edu
gestudy.byu.edu
acm.byu.edu
helium02-idrac.byu.edu
api.muschoir.byu.edu
compclinic.byu.edu
api.dental.byu.edu
saascon.byu.edu
api.cfacprweb.byu.edu
organplayingwiki.byu.edu
resourceplanning-dev.byu.edu
we.byu.edu
sitepublisher3.domainssupport.byu.edu
vita.byu.edu
*.byu.edu
ypay.byu.edu
byu-dept-shc-dev.amazon.byu.edu
ucs.byu.edu
msedev1.byu.edu
lsopencloud.byu.edu
sl2web.byu.edu
humwp-nonfarm.byu.edu
compliantmechanisms.byu.edu
hummedia.byu.edu
itb-lab-asa.byu.edu
jrcb-lar01.byu.edu
womeninbusiness.byu.edu
brand.byu.edu
imaal.byu.edu
*.cs.byu.edu
planningandassessment.byu.edu

Certificate

The complete raw certificate details for marvin.byu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGBjCCBO6gAwIBAgISA2XBDnMLtCtSXtwXx3j5bLcQMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA1MTEyMTA4MTFaFw0x
ODA4MDkyMTA4MTFaMBkxFzAVBgNVBAMTDm1hcnZpbi5ieXUuZWR1MIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD3oKqC2lNoFQkOYed/aCU26ETmjj9zn
yVO4g68kbK7gKTRdWN/aJFxkuv53CdC0cVzw9waqcYIJoG9Dt2TkhKvSzSnQ5ElR
m6OQ4nnXSPAteOlV/vcTsq0b2tsOotUw3neQKtXhIxZrC+dgD0yESR0F6ApluNVj
iWx2b3lgfWTEkLzs1BDNwznltfhTZxIBAEQtstkBiNx80pP24ewYO+B1WqXm+2hc
6ZH5rznUyzhA0JwTOPW+XNS2rfoQt05GQgnVYUqvwXbca1hIWyM9+YUy+npP6CFg
vWGgCTK4hSP/I5Or3MuMGCyhCoaZ2dPRydvpuD7rr+PcoZZ14zzF0wIDAQABo4ID
FTCCAxEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBR7QMXEDZTuk4yDMXsEfc6El60k
JTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRj
MGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5v
cmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5v
cmcvMBkGA1UdEQQSMBCCDm1hcnZpbi5ieXUuZWR1MIH+BgNVHSAEgfYwgfMwCAYG
Z4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nw
cy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZp
Y2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMg
YW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xp
Y3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8w
ggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQDbdK/uyynssf7KPnFtLOW5qrs294Rx
g8ddnU83th+/ZAAAAWNRP0WUAAAEAwBGMEQCIBAt4HNVIN1Wovc/MxaSfuTdjFWN
pAdNEXsMH2R8U5NoAiBxq94ThZ4PCMPr6GH7JtW2rcmspKeQUgxvINxM1thjQgB2
ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABY1E/RbEAAAQDAEcw
RQIhAMyMgLVSTIiGERL2FzwYR4ZqVMoLf0wZoMOf8da4R2MvAiAQ34TtUqRMnfmQ
8oN/5qTp6yKGXF7/cZLioTQ+Nzy8YzANBgkqhkiG9w0BAQsFAAOCAQEAQtJM1ohl
2XVzkLQwBJniiVc3UpAPo+3I1JMa4EJ61YWAhIhZIMFS4cxnc2we41r2Oi0Xf5PF
OxHq/8W5ExYo81zw3yE0FpUiGWHpdCUjnK0WGQUQ6085B6t9/6NHLNXipPZsDCRv
15RAyQUan7nTg7xbHjANYjYNHcNmL9+3qoocwrUo49N1F/uYlXBVj3P3+2kKFlOt
WCX+pMdAu6Mo6O9A+Y+V/fCRi22gtbH8fCOSznII1aTtqsZTxx6xxnZhOePbgNqe
W/vh25KYuxn4OwOaHgImzwj9v3muT7ZoQFfMgXW4/+8cUyaa5bCMvJuYSCpTgJe+
gmKk7NsGmplJ3w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD3oKqC2lNoFQkOYed/a
CU26ETmjj9znyVO4g68kbK7gKTRdWN/aJFxkuv53CdC0cVzw9waqcYIJoG9Dt2Tk
hKvSzSnQ5ElRm6OQ4nnXSPAteOlV/vcTsq0b2tsOotUw3neQKtXhIxZrC+dgD0yE
SR0F6ApluNVjiWx2b3lgfWTEkLzs1BDNwznltfhTZxIBAEQtstkBiNx80pP24ewY
O+B1WqXm+2hc6ZH5rznUyzhA0JwTOPW+XNS2rfoQt05GQgnVYUqvwXbca1hIWyM9
+YUy+npP6CFgvWGgCTK4hSP/I5Or3MuMGCyhCoaZ2dPRydvpuD7rr+PcoZZ14zzF
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295961992883042406882890764958851954161424
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-11 21:08:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-09 21:08:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'marvin.byu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24268281983867270462711116018798215660966299648555704882908608718510488918858934125804973390248006259656567902899392632567941521757493348159508808456089813523700429741033240142386966120961085712942211856100503913695832884229405929085298789487670006169266684771181347978278997353226029390786538070016945337864405953883943854908277824713558643724761801226209310650961337810203502595312634822309475608691904846563257260903128204745560081531972978206723663649974573041653224779994681943499736515449849944344094889891045099365324502449019561306184177546367361560093583113455338502240772391357529135837253515345068577048019
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7b40c5c40d94ee938c83317b047dce8497ad2425
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marvin.byu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000163513f459400000403004630440220102de0735520dd56a2f73f3316927ee4dd8c558da4074d117b0c1f647c539368022071abde13859e0f08c3ebe861fb26d5b6adc9aca4a790520c6f20dc4cd6d86342007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000163513f45b10000040300473045022100cc8c80b5524c88861112f6173c1847866a54ca0b7f4c19a0c39ff1d6b847632f022010df84ed52a44c9df990f2837fe6a4e9eb22865c5eff7192e2a1343e373cbc63
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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