siacconnect.utah.gov

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:7e:6d:d5:b4:fd:a3:dd:c9:59:49:b0:96:e4:be:87:d1:be was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=siacconnect.utah.gov

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7e:6d:d5:b4:fd:a3:dd:c9:59:49:b0:96:e4:be:87:d1:be
Serial Number (int): 391470717440779824684771491501972426052030
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 34:8c:97:88:50:ab:39:f2:71:fb:a2:54:d2:42:25:3e:83:f7:d9:cb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 86:13:70:a8:08:34:d3:03:f1:0d:e9:52:38:f3:7f:f3:5b:cc:8b:37
Fingerprint (sha256): 01:68:f6:c1:29:73:49:1b:75:39:3f:57:f6:69:45:f2:f6:cb:ab:50:51:d9:58:56:9f:be:9f:d0:0d:09:40:4f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate siacconnect.utah.gov

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for siacconnect.utah.gov

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

new.siacconnect.utah.gov
siacconnect.utah.gov
utahmostwanted.org
utahsiac.org
www.utahmostwanted.org
www.utahsiac.org

Other certificates including the domain name utah.gov

(limited to 100 certificates)
forms.uid.utah.gov
utssd.utah.gov
dsamh.utah.gov
thrive125.utah.gov
healthyaging.utah.gov
brag.utah.gov
ssl1.revizesites.com
*.tax.utah.gov
redistrict.utah.gov
prod.35.slot.cdn.salesforce-communities.com
ridetolive.utah.gov
*.ps.utah.gov
siacconnect.utah.gov
ecare.sandy.utah.gov
vrtraining.health.utah.gov
strongerfutures.utah.gov
*.waterrights.utah.gov
www.ag.utah.gov
gis.utah.gov
loren.propertyservicesexchange.com
mybenefits.utah.gov
support.lazycoupons.in
ussc.utah.gov
*.washco.utah.gov
utahcares.utah.gov
unis.utah.gov
pawn.utah.gov
prod.35.slot.cdn.salesforce-communities.com
info.hoptek.ai
ogm.utah.gov
internal-utahgrants.utah.gov
www.archives.utah.gov
fair.kane.utah.gov
opendata.utah.gov
www.nephi.utah.gov
cottonwoodheights.utah.gov
911.utah.gov
*.dwr.utah.gov
tls.automattic.com
*.washco.utah.gov
*.dts.utah.gov
image.comms.caredeliveryorganization.com
maps.wasatch.utah.gov
incapsula.com
floodfacts.utah.gov
liquorstore.klvnmarshall.com
walkmore.saferoutes.utah.gov
incapsula.com
seualg.utah.gov
pedestrianmyths.utah.gov
move.utah.gov
firepower-internet.westjordan.utah.gov
scheduling.udc.utah.gov
fair.kane.utah.gov
emmanuelschoolsikar.com
app.udot.utah.gov
producesafety.utah.gov
rsbridge.com
museums.utah.gov
ucip.utah.gov
gopb.utah.gov
cuedle.fun
emprep.wasatch.utah.gov
vpn.westjoran.utah.gov
utahstatecapitol.utah.gov
*.utah.gov
cmssd.duchesne.utah.gov
*.le.utah.gov
*.utah.gov
insurance.utah.gov
*.washco.utah.gov
ccapitool.ezlo.com
house.utah.gov
transparent.utah.gov
dspd.utah.gov
library.utah.gov
daisuzz.dev
imperva.com
*.dhrm.utah.gov
blog.udot.utah.gov
*.dat.health.utah.gov
siacconnect.utah.gov
metisengine.com
gis.brighamcity.utah.gov
support.fanuccontrolrepair.com
*.health.utah.gov
opendata.utah.gov
tlamap.trustlands.utah.gov
incapsula.com
www.nsemble.ai
maternalmentalhealth-ws.dts.utah.gov
ssl1.revizesites.com
house.utah.gov
ocs.utah.gov
udotauctions.utah.gov
911.utah.gov
govops-stage.at.utah.gov
support.fanuccontrolrepair.com
history.utah.gov
ome.utah.gov

Certificate

The complete raw certificate details for siacconnect.utah.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGxTCCBa2gAwIBAgISBH5t1bT9o93JWUmwluS+h9G+MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMjQwNzIzMjhaFw0y
MDAxMjIwNzIzMjhaMB8xHTAbBgNVBAMTFHNpYWNjb25uZWN0LnV0YWguZ292MIIC
IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAr/1CNWQEQvWEMHJgHprQnQDQ
cAqdZMlYjw+UE8/hD00+O4JQZuWQRlS9v/JKM24ggqVBMRaC21RZ3B8LCsMhgEGr
8lvSmwQeQPBkQlAw0U4vnhmPlH2GWDFd1GMscP7gvaDNpiF7YxzvXPIV9dSeEA5v
RU3WTjf4clYeHWEl+Sc6zfM0nWvYNlLZiXaMyQj+wjSew8/d9VNLF4cW44nf6KQb
7tc9tg6HD5KMZ4lAWmAE5vXGrXODwU0dNKt1JC4x/DY2feR7Dbbb1Am0b3nBNIVa
qQFFxZq+nns/x4m6UEsPjnCODohC3sCpoz7MOTBYdQA4J05Uxd2OwA3TYaFXoWNj
xh08WoY3Td5Z1Gz9sIgguJgsPb32N2ZEkbz7tsE4oApZH3QRC4gH9fCIQopT3hwo
PMgQ0sm5kJTVrArSacPsi2Xt8DVzfHxrYD7bIwvee0KXYuY7rSHNDMg81uoQmVue
Zp8NmASm0CjbKfR8asB/DiezakVtfqg19o+O64KTwY9FIn3icnOHFkG6rY3UfvF0
t04yAAcXowFr57YZCb7VVBabgDMaQiVN7kvVoJ674r2Pqq7ZZm1z2Kd5Sb8QjO6I
NxDNMUHOkhOIVErR2auEiLpHr9YMsEoPdn21kg0bv/dh3W90OvlQvxRhC7FIrYKR
JHDOg65Px/VdsK2a2YkCAwEAAaOCAs4wggLKMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQUNIyXiFCrOfJx+6JU0kIlPoP32cswHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3
pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2Nz
cC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2Vy
dC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzCBhQYDVR0RBH4wfIIYbmV3LnNpYWNj
b25uZWN0LnV0YWguZ292ghRzaWFjY29ubmVjdC51dGFoLmdvdoISdXRhaG1vc3R3
YW50ZWQub3Jnggx1dGFoc2lhYy5vcmeCFnd3dy51dGFobW9zdHdhbnRlZC5vcmeC
EHd3dy51dGFoc2lhYy5vcmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC
3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcw
ggECBgorBgEEAdZ5AgQCBIHzBIHwAO4AdQCyHgXMi6LNiiBOh2b5K7mKJSBna9r6
cOeySVMt74uQXgAAAW383Q/sAAAEAwBGMEQCIDyQ2Jc14qRHQqXBDuMtZkH3uOsL
YED9ZjwImmhbKjnSAiBBonuUVAeG9Y2RT/ST/a10u/VFuS/pduve20fJMwSCmwB1
AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABbfzdEBcAAAQDAEYw
RAIgRuuOhUzm6HzW5//jEEUS9xDYnMo8iHJUrABBDVX6CHwCIBm+A3furjCTZl+s
hiZLnwqI37Mrf5gVeVhRcmj+EQsSMA0GCSqGSIb3DQEBCwUAA4IBAQAQ368abS3L
1X7y5IXhNDtQIwqkicvyBLhcYNee00e+GyrtH3orkYXZJJJJka+e4uPRxxC1NJvA
8M7botB95AJlkcPyQ9b9wE9cl0VudVyaC1agXd0VakKQo8LlloCFuCvJVjPWz09Y
cSv2uMdKFWIlnG8Q1mwEeFv38q50nMiFPm4bH74Gsq6I5A/f2oTnSD7kiDYpa4TN
HdqSsmoB4zwBLeJX9bQ1P9MMt89EGd1OebfxWz3klz2UWhgVzHzrr70nVGJyKKCI
UsVeF5BNljKlrQES0X//+6xUy6r+h43AyUfOBLrcKJsEcCEck0rd++ktCnHSqQjJ
xLOIQ+IzU8t9
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 391470717440779824684771491501972426052030
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 07:23:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-22 07:23:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'siacconnect.utah.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 717973669153673389635186269908915578529053897006604530916924270685519957812764240379190041605975596475840746699952226337969210328902596293704258752165854502043254815515497804980773954893659186989201787355411048312314450722985840646698348083974321097186408738386893778621667298931221216094162297869058625094450569985339982042926509273946327243972732898657496109294073526292837655920893848887455306184432393349926862287302390764931361349986057954036889142012782313952771217665331859764817172715886566910666166042635591392943406014941935723915546699733471761977947102537079929843432962080765142013014408275206299421903881036759565840912226369942601973665521346312386922140527126520628153547006975293866100600558934349477983830824318802801999525896457228007608487946833317012662336110933890638889749088851844623717520766291881082689997370748314168556837125914478896859073317644185232380920529424891882032231335822937204505652531160639150401797590529098385236949254902282780191488716627080891148816475644492896327117136483888922102599220050461644532356333721833127588740174482084776584584716376128411424632198790619577305187575786028456601761433596087320452060153572290269584879136978291832917188604231879931397108745591266712641171282313
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							348c978850ab39f271fba254d242253e83f7d9cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.siacconnect.utah.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siacconnect.utah.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utahmostwanted.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utahsiac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.utahmostwanted.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.utahsiac.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dfcdd0fec000004030046304402203c90d89735e2a44742a5c10ee32d6641f7b8eb0b6040fd663c089a685b2a39d2022041a27b94540786f58d914ff493fdad74bbf545b92fe976ebdedb47c93304829b0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dfcdd10170000040300463044022046eb8e854ce6e87cd6e7ffe3104512f710d89cca3c887254ac00410d55fa087c022019be0377eeae3093665fac86264b9f0a88dfb32b7f98157958517268fe110b12
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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