sporty.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:99:d9:2d:d5:75:64:82:8f:67:f3:e2:64:c6:55:92:54:1f was issued on by Let's Encrypt.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sporty.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:99:d9:2d:d5:75:64:82:8f:67:f3:e2:64:c6:55:92:54:1f
Serial Number (int): 313688740392082332591960831066398832874527
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 92:a2:09:81:8b:b0:7e:21:d4:cc:b9:2c:9e:82:b2:5f:d4:db:19:c2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e0:86:a2:f6:9a:6e:0a:e7:42:8f:ec:c6:f8:7d:e7:b8:1e:7e:01:24
Fingerprint (sha256): 01:96:2d:97:b2:9c:9d:e8:6c:5f:1b:aa:1f:f2:eb:0b:a7:75:b4:51:a9:ed:92:ef:53:83:91:ac:36:fe:ef:ed

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sporty.co.nz

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ararimu.school.nz
ashleyforestrallysprint.co.nz
aucklandrugby.co.nz
aucklandsquashjuniors.nz
aucklandtouch.co.nz
beckenhamtennisclub.co.nz
bowlshawkesbay.org.nz
bowlswaikanae.com
cometswimming.co.nz
eakfc.org
ecbsoftball.org.nz
generatenetwork.org
glenfieldsoftballclub.co.nz
harbourhockey.org.nz
hawkesbaylandingpad.co.nz
hblp.co.nz
hbsfc.co.nz
hyc.org.nz
juniorcricket.co.nz
jyf.co.nz
karakacricket.co.nz
karakatennis.co.nz
kensingtonfitness.co.nz
kiwikidz.co.nz
marlborough-car-club.co.nz
marlboroughvolleyball.org.nz
mtrbmx.co.nz
netballwairarapa.co.nz
northharboursoftball.co.nz
nskfc.org.nz
osssa.org.nz
parafednorthland.co.nz
playbowls.co.nz
porritt.school.nz
prdf.co.nz
ratec.org.nz
roosterssoftball.co.nz
schoolsportaoraki.co.nz
sissnetball.co.nz
sportotago.co.nz
sporty.co.nz
tabletennissc.org.nz
taradale.co.nz
tgahockey.co.nz
torbaytennis.org.nz
touchpapamoa.co.nz
twyford.school.nz
waiopehu.ac.nz
waiukuponyclub.co.nz
wmcc.net.nz

Other certificates including the domain name sporty.co.nz

(limited to 100 certificates)

Certificate

The complete raw certificate details for sporty.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZFJexKoMLT4qQKWGd/X
4oH956QqwiYz/txp9BuvUvKlmaEVziOztElXEgHJCLq4wUbW2be1qa8y4gDIsizV
XtwppKmDCfFDl5w37gF6SNh+IW/Ur+Dw40eiP05OHMxn8M4/cnME7OWAtxa6yyPn
tnm1RRzvtJS2EnUOp1BrkawRoJy8oLHreHTPB11PA9fhmu80n3AQLY4rw4Dct6nS
upy/GnX/5NQKq0A6M0jfiO6RK8mc/trmWM2iHhVw4HiFfnozmaVoQZx8cHYNcXjY
6dueA2+HIIXMgVhmG4t1yrDVHS1mJ1Keh58M4cCrTbb0S9pHbNpJtT3RpXRSIWZF
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313688740392082332591960831066398832874527
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-29 05:35:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-29 05:35:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24940589785071683390862738295091576468169290895548671470726386190423644217877932937528615033098903724299399289474482607430372287524975365001555066949827296815237033967320659233937100517584896189950947186244672957627328899351723864115300911567020680524404457511232297326700375556434917077701508834039688097103314534507827411426626275137362599497907035060329891514073955983937956201034767706905948789989346607377418422101105095400945145529088122606086559307312632372970312476995145246914615596829504001712499840679284601832004974621561997707924546030984018898472825419154785072812217472633655044799780851464522246276357
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							92a209818bb07e21d4ccb92c9e82b25fd4db19c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (997 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ararimu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashleyforestrallysprint.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandsquashjuniors.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandtouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beckenhamtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlshawkesbay.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswaikanae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cometswimming.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eakfc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecbsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'generatenetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenfieldsoftballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harbourhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbaylandingpad.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hblp.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbsfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juniorcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jyf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakacricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakatennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kensingtonfitness.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiwikidz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlborough-car-club.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughvolleyball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtrbmx.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballwairarapa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northharboursoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nskfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osssa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parafednorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porritt.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prdf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratec.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roosterssoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsportaoraki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sissnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportotago.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabletennissc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taradale.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tgahockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torbaytennis.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchpapamoa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twyford.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waiopehu.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waiukuponyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmcc.net.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001689851c166000004030046304402200696bbc19c0962f89a78921244ea0cddb7f50fa74bb2a8e19e92c3dc236bf9220220780f78a59ef78aae98a39939603e75604a25a2a3d00da88d8ec223618300636300760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001689851c1790000040300473045022039852d3102fc1e3260874da60c167dd80753f5b5c344a11a4a4800abe870b176022100c0b650bd6a7c18f45447d8e2713222dbded189bdc40edea90b27a3773804c4ab
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0008d8591fd93d4927d7b533143ad2ee41f446e476f3d53a3f3a8a10359dc35a550bec1b0d8dd92701838ea5dc2b507acc14aeeb198f14c5fb2a98fbc3c4287faf2b2e45436722886cda4db23ca6753b02c9a420bff0c63f4606e2a847405419ec7e75f6c7e21ed4e91c02477288a574aec4f8b62395433288e2af589aeab88b8ec30836a4fa591fc4a2ec5e8613b0377f6af8325263b3d14b9eb893f510dade23cf3667ec7b07dcf646162e6493faeaa5992a10875367734e06f6c88a817bb056b7bfcfdfa124dda7a1dd8a50d1c2255f435e339df67df9e0e60cb6c9445634a6931bc5c7931e9b4960f3a41d8476f29fb1e312bfff867500583b74a53fdb76fe