Desktop.deloitte.co.uk

- DELOITTE LLP -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 05:24:37:0a:33:ce:e2:5c:e0:81:a7:4f:d9:dc:86:86 was issued on by DigiCert Inc.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

DELOITTE LLP

Organization: DELOITTE LLP
Organization unit: UKITS
Locality: LONDON
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:24:37:0a:33:ce:e2:5c:e0:81:a7:4f:d9:dc:86:86
Serial Number (int): 6834179006675502331495016937455126150
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 89:d2:49:c1:f6:6a:b8:ce:e0:d5:b9:c6:94:28:01:0d:83:27:b6:af
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): e7:fc:5c:22:a7:79:89:fe:89:f6:7b:63:8c:91:76:2e:c1:60:be:fc
Fingerprint (sha256): 03:5a:72:3d:a7:fe:73:e7:5c:6a:fa:84:46:be:2c:fc:0c:31:a1:16:a8:eb:64:92:a7:4e:fb:44:23:29:4f:4e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate Desktop.deloitte.co.uk

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Desktop.deloitte.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

Desktop.deloitte.co.uk
netscaleragauthvip-dc1.uk.deloitte.com
netscaleragauthvip-dc2.uk.deloitte.com
netscaleragauthvip-dc1mpx5905.uk.deloitte.com
netscaleragauthvip-dc2mpx5905.uk.deloitte.com

Other certificates including the domain name deloitte.co.uk

(limited to 100 certificates)
aboutdeloitteconnect.com
www.taxpublications.deloitte.co.uk
gpportal.deloitte.co.uk
anywhere.deloitte.co.uk
cronus.deloitte.co.uk
analyticshub.deloitte.co.uk
tdanalytics.deloitte.co.uk
attendanceapp.deloitte.co.uk
staging-surveybench.deloitte.co.uk
compliancelearning.deloitte.co.uk
Discovery.deloitte.co.uk
www.deloitte.co.uk
keys.deloitte.co.uk
ukmrsproxy01.deloitte.co.uk
www.deloitte.co.uk
ghapp.deloitte.co.uk
aboutdeloitteconnect.com
analytics.deloitte.co.uk
Desktop.deloitte.co.uk
mdnetgw1.deloitte.co.uk
surveybench.deloitte.co.uk
ias.deloitte.co.uk
belfast.deloitte.co.uk
belfast.deloitte.co.uk
crisissimulator.deloitte.co.uk
acuity-dev.deloitte.co.uk
ixbrlreview.deloitte.co.uk
dlt.deloitte.co.uk
tsanalytics-dev.deloitte.co.uk
dijv.deloitte.co.uk
ukdc2ise001.uk.deloitte.com
qposapphire.deloitte.co.uk
anywhereUAT.deloitte.co.uk
vatnumberchecker.deloitte.co.uk
dsar.deloitte.co.uk
www.surveyhub.deloitte.co.uk
mercury.tax.deloitte.co.uk
gp-testportal.deloitte.co.uk
mlearning.deloitte.co.uk
aboutdeloitteconnect.com
discovery.deloitte.co.uk
ias.deloitte.co.uk
www.deloitte.co.uk
spotlight.deloitte.co.uk
pr.deloitte.co.uk
qrscms.deloitte.co.uk
sni.cloudflaressl.com
dsar-pre.deloitte.co.uk
gptestportal.deloitte.co.uk
pxs.deloitte.co.uk
gpportal.deloitte.co.uk
psawizard.deloitte.co.uk
spotlight.deloitte.co.uk
dtsresources-management-nonprod.tax.deloitte.co.uk
siplync31.deloitte.co.uk
gptestportal-alternative.deloitte.co.uk
introspect.deloitte.co.uk
mg.deloitte.co.uk
tsanalytics.deloitte.co.uk
smartfuel.deloitte.co.uk
anywhere.deloitte.co.uk
usap42.us.deloitte.com
taina-ocr.deloitte.co.uk
survey.surveybench.deloitte.co.uk
webmail.deloitte.co.uk
usap42.us.deloitte.com
ukgateway11.deloitte.co.uk
dlo.deloitte.co.uk
mourauat.dtrax.deloitte.co.uk
discoverytoken.deloitte.co.uk
associates.deloitte.co.uk
bigplays.deloitte.co.uk
ukdeloittejss.deloitte.co.uk
discoverytoken.deloitte.co.uk
belfast.deloitte.co.uk
nweweb53ext.deloitte.co.uk
email.deloitte.co.uk
dev.smartmiles.deloitte.co.uk
gasurvey.deloitte.co.uk
360.deloitte.co.uk
dplayer.deloitte.co.uk
ihr.deloitte.co.uk
belfast.deloitte.co.uk
usap42.us.deloitte.com
cfcassessor.deloitte.co.uk
sni.cloudflaressl.com
mcert.deloitte.co.uk
connect.deloitte.co.uk
qrscms.deloitte.co.uk
smartfuel.deloitte.co.uk
nweweb53ext.deloitte.co.uk
discovery.deloitte.co.uk
sipskype1.deloitte.co.uk
lyncabs.deloitte.co.uk
psmt-pre.deloitte.co.uk
lifetime.deloitte.co.uk
aboutdeloitteconnect.com
anywhereUAT.deloitte.co.uk
blogs.deloitte.co.uk
www.surveyhub.deloitte.co.uk

Certificate

The complete raw certificate details for Desktop.deloitte.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbflbARfcNsak20NXJG4
V3xNfPJFsR4XWmCFYF0eGqXEv/SfO+kinM+NtpiY6dvkIiisfcD3qN6aL2/fFMYf
wGqJ5JH+nF9acckVfgAbnNFvXyfzgfDsDrRzjjebh01UhEzgimtky5ttXHTFIFHG
Cax5UpEzhheMKF8SYigbmR1fjVQGs9lYpH5fOuFxUiQWXPCPQK2XtwQGwed+uLTc
XgUmuGJIK7ANJkZ6kRUHvV41MuE9BURjxa/ZQeD8rk61+fgiUVfHEzI1jv+WsPf9
Tun7NX70w/eN0LUiTCFDk5bQBP1DRDf0Lsj4+k4OsFBrJA39NjY6HELaVlct/u/2
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6834179006675502331495016937455126150
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-07 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LONDON'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DELOITTE LLP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UKITS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Desktop.deloitte.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24959628664191465427194910344932868546008172623538701367471224302133054363152244621519934786146259492193201327692819082307415499521307212810494898330742969754914609275951060101393543941302611910561912499735371326332315961545652146191651798056227043765106861209768364165334652734680853503975268009546559702263727999787220027147508918695594106625595025700286316964511505171490424993446019709160490836845206348570261417817409656215069713652758822535861920948447841186294116293765096773299078025091596366168971822109356767636663436686803928175932671777764257661878002632335657232097661435719726896535591269608794335737377
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							89d249c1f66ab8cee0d5b9c69428010d8327b6af
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (201 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Desktop.deloitte.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netscaleragauthvip-dc1.uk.deloitte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netscaleragauthvip-dc2.uk.deloitte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netscaleragauthvip-dc1mpx5905.uk.deloitte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netscaleragauthvip-dc2mpx5905.uk.deloitte.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000168942fdca600000403004630440220063153046b5eb5395168690ef5180e1de43fa6266441fdd4d213015fe319a7fc02201139d1362b8ecf97b59c98e19b7035286ae876f0067854ed6581b5090757e17b0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000168942fdd820000040300473045022055fe2339786fd1701196c9989d989d71682e4e11ccd8df36403e5744e2b1688b022100b91cd3d49ea9fe50249554bbe89c4873e770d3db1d9f371086d0a2882cab918e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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