activity.careercenter.ncu.edu.tw

Issued by R3

About this certificate

This digital certificate with serial number 04:ea:93:46:7f:3f:e8:35:fe:6d:a4:6b:df:05:f5:99:06:e7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=activity.careercenter.ncu.edu.tw

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ea:93:46:7f:3f:e8:35:fe:6d:a4:6b:df:05:f5:99:06:e7
Serial Number (int): 428270980143630326807187531224138898802407
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 45:5b:b9:b2:78:c7:36:d2:df:a3:02:6b:22:7b:56:49:f4:28:ed:6f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 15:6d:89:8f:14:3b:6f:19:2d:b1:05:44:92:11:ac:c6:a4:7a:90:8c
Fingerprint (sha256): 08:da:60:20:d1:fe:5d:75:9d:ee:27:fb:e3:e4:c4:99:a3:ce:26:f6:1e:dd:b2:fb:70:51:38:0b:c8:be:7f:94

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate activity.careercenter.ncu.edu.tw

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for activity.careercenter.ncu.edu.tw

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

activity.careercenter.ncu.edu.tw

Other certificates including the domain name ncu.edu.tw

(limited to 100 certificates)
ilearn.lst.ncu.edu.tw
www.ce.ncu.edu.tw
snmg-nas.ce.ncu.edu.tw
snmgnagios.ce.ncu.edu.tw
abroad.oia.ncu.edu.tw
ilearn.lst.ncu.edu.tw
gitlab.csie.ncu.edu.tw
*.mcl.math.ncu.edu.tw
apitest.cc.ncu.edu.tw
gitlab.snmg.csie.ncu.edu.tw
cis.ncu.edu.tw
easytest.lc.ncu.edu.tw
health.ncu.edu.tw
wasn.csie.ncu.edu.tw
ilearn.lst.ncu.edu.tw
webmail.ce.ncu.edu.tw
ilearn.lst.ncu.edu.tw
appropriation.is.ncu.edu.tw
ir.lib.ncu.edu.tw
service-learning.ncu.edu.tw
ncueeclass.ncu.edu.tw
ir.lib.ncu.edu.tw
eustoma.cc.ncu.edu.tw
psl.csie.ncu.edu.tw
hr.mgt.ncu.edu.tw
ilearn.lst.ncu.edu.tw
sex.ncu.edu.tw
ilearn.lst.ncu.edu.tw
ilearn.lst.ncu.edu.tw
careercenter.ncu.edu.tw
ilearn.lst.ncu.edu.tw
eustoma.cc.ncu.edu.tw
ceecs.ncu.edu.tw
ilearn.lst.ncu.edu.tw
ir.lib.ncu.edu.tw
eugene.csie.ncu.edu.tw
easytest.lc.ncu.edu.tw
eustoma.cc.ncu.edu.tw
*.csie.ncu.edu.tw
emba.ncu.edu.tw
snorlax.in.ncu.edu.tw
issl.csie.ncu.edu.tw
www.me.ncu.edu.tw
ilearn.lst.ncu.edu.tw
portal.ncu.edu.tw
networklab.csie.ncu.edu.tw
appstore.cc.ncu.edu.tw
ilearn.lst.ncu.edu.tw
api.emath.math.ncu.edu.tw
ilearn.lst.ncu.edu.tw
ilearn.lst.ncu.edu.tw
rcsc.ncu.edu.tw
ilearn.lst.ncu.edu.tw
ilearn.lst.ncu.edu.tw
ilearn.lst.ncu.edu.tw
english-distance-teaching.cilab.csie.ncu.edu.tw
eustoma.cc.ncu.edu.tw
mwnlgit.ce.ncu.edu.tw
dsp.ee.ncu.edu.tw
story.lst.ncu.edu.tw
issl.csie.ncu.edu.tw
5-212.dorm.ncu.edu.tw
ilearn.lst.ncu.edu.tw
ilearn.lst.ncu.edu.tw
ncufresh.ncu.edu.tw
eec.ncu.edu.tw
gwlab.phy.ncu.edu.tw
www.geneinfo.com.tw
rubygems.nos.ncu.edu.tw
story.lst.ncu.edu.tw
ilearn.lst.ncu.edu.tw
portal.ncu.edu.tw
story.lst.ncu.edu.tw
ilearn.lst.ncu.edu.tw
19.ncufresh.ncu.edu.tw
cis.ncu.edu.tw
ilearn.lst.ncu.edu.tw
nildlp.ncu.edu.tw
ilearn.lst.ncu.edu.tw
globe.tw
iisr.csie.ncu.edu.tw
ilearn.lst.ncu.edu.tw
irsl.ss.ncu.edu.tw
isrs.csrsr.ncu.edu.tw
ilearn.lst.ncu.edu.tw
ilearn.lst.ncu.edu.tw
sex.ncu.edu.tw
issl.csie.ncu.edu.tw
ilearn.lst.ncu.edu.tw
oauth.apitest.cc.ncu.edu.tw
enable.ncu.edu.tw
activity.careercenter.ncu.edu.tw
story.lst.ncu.edu.tw
eustoma.cc.ncu.edu.tw
iisr.csie.ncu.edu.tw
ncuinternship.careercenter.ncu.edu.tw
repair.ncu.edu.tw
www.csrsr.ncu.edu.tw
*.csie.ncu.edu.tw
*.mcl.math.ncu.edu.tw

Certificate

The complete raw certificate details for activity.careercenter.ncu.edu.tw in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgISBOqTRn8/6DX+baRr3wX1mQbnMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA0MjcwMTExNDlaFw0yMzA3MjYwMTExNDhaMCsxKTAnBgNVBAMT
IGFjdGl2aXR5LmNhcmVlcmNlbnRlci5uY3UuZWR1LnR3MIICIjANBgkqhkiG9w0B
AQEFAAOCAg8AMIICCgKCAgEAwqmbbOriDLJNUKotc3E0dAy1snnX5cy7Puc43WQb
wfZLxCBIxB19YNWDBnCwhDhRM1olOz1m3oKtPQNodpose99tJ+iPh87Onx2Goxh8
m9QBFLkSlg/vh0jpGl5TnMLWDDADdQ4HMJwS+b4Tcih2K9WKbZbwvgoldbhJs8nC
DIWLEMHQq6qC6/sEiBkW0P+3bQhWtoDp6cyhp5ZjfeHaLYU3DpChtt0siaFasM24
Y6MNPPu3P8TwjFI45mCRqheYlyYZ8h7cBu2LCvVT3xn25Tv8O3tKkXIj9pqOo+MY
+fVA3y84lYBrz5rUsZx+eWzYnSfIZveftt41RvxDUE4l14GAM/XJmPcWr10P/ftj
SnOV9AHZ2Ty1lxEdVKZkubEsMb/nt1DLek8YeAauIu/EUXeS9CJMsca97EKobreE
O0UcNtVrbKvqmsxuzYgFjk77FXB3/im2rD0XqGd1a9/BxcsMTc5A/qkDTMaSFgr3
jkSo4WS/cbJyglE6xA5ZlwrbMP7aV8EfEBKqlHkv0MJV63bO2eY1N4LbBXkPbFv7
fVm+x2ndE3SjoHBB9l4xLZJ6QfqbGuAX6P0Nn+gXCkf5tSZCI3gKlcUUpnRTAnym
CMYQ3CiBIKU0kpd1EMHgmnSpyUSozVY16nNr9Lx4uKq3c/mdJVl3V7PvcrxV3cQA
JKsCAwEAAaOCAl0wggJZMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQURVu5snjHNtLf
owJrIntWSfQo7W8wHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYI
KwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcw
IgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wKwYDVR0RBCQwIoIg
YWN0aXZpdHkuY2FyZWVyY2VudGVyLm5jdS5lZHUudHcwTAYDVR0gBEUwQzAIBgZn
gQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s
ZXRzZW5jcnlwdC5vcmcwggEGBgorBgEEAdZ5AgQCBIH3BIH0APIAdwB6MoxU2Lct
tiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYfAeygMAAAEAwBIMEYCIQCCNdnr
UgIwiLc0Y8kDqCNzUtUuv99QvrD2bPNxb9x+7gIhAJ+PAElaj7mPVy0i//+gLAkU
vveFwbJUBGkovQbW1ndXAHcArfe++nz/EMiLnT2cHj4YarRnKV3PsQwkyoWGNOvc
gooAAAGHwHsoFQAABAMASDBGAiEAx358QLkV8IuIUzQG18//HUTX3nczu17hlpxC
Xay22swCIQDVBet9Xv+HA3ID6ky4tVrpjBZJUHDWPwNQggJcvPHQMjANBgkqhkiG
9w0BAQsFAAOCAQEAI76zhVz2w9e6rVRbdQNKuuOYIluGWVnnL4MofdPnK00a5w9Q
tlFD7dIrYU/1xXW0MNkZcpDWCZf/4u8HVl1Kf+8kpC7RJkJnSkqZdbAMD/ArqnYy
YNkWfR3vprN/qtbOj604xHPRagUMyhBUfw0aQcVs6Sz02ac7BPiVrFOtRzoaEPJV
PkU0IG8FTayguhZsPLm0ZclyFyoFb75aetdK00FDzIhQZNxXDjcBo7LIyCtlVE7S
V1DWKrXLibBY2Boq/0LSNMsfkaQLICZF/wuTttI+dIcB9ixPS1/BnwNSdw6g5Afl
B38gJvzsUoSa0Hzrz92A5vWLFsn8f1Cg9b+nWw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 428270980143630326807187531224138898802407
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-27 01:11:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-26 01:11:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'activity.careercenter.ncu.edu.tw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 794153827026574415836888741551957016162740996732318073242042661014152077066686562643105914113207653859002257592910236787130274239396677283758191276764622756301340193640914421974222349807225027038057300372842493047952765202728809415859117983089691588515107774984936088908418950149249368493820137932718520929727012490255222981868398841687355822265275205419485496821292151331526377748866495272774668871030658089009634809857353405030614368666137116457207773522095681271414904572385811132203355095568185055083761103601052985594962988614859551979036688293081976379352721191227817412678153164415647313354309309387827405851924650979949280996956196993498363556750709869593488512756303650238240449489991320786449892036028024711120688477428804791957543828436124854595938630607474384883462879853071733856126569086844561184207242996617976959627084444870690305630051739247285502918067865034922990250303601892965948478067028132585898882371615495876681906525900738119073356080762889469090235055101626969162328333507758496087471351844586173399676486184963635856360497838634556727615792718567124490896930415558984033951540675518504929088768532447389853674025738638675459201679721703159707843142480388082902805806928210117712811067938123426071314441387
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							455bb9b278c736d2dfa3026b227b5649f428ed6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activity.careercenter.ncu.edu.tw'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187c07b280c00000403004830460221008235d9eb52023088b73463c903a8237352d52ebfdf50beb0f66cf3716fdc7eee0221009f8f00495a8fb98f572d22ffffa02c0914bef785c1b254046928bd06d6d67757007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000187c07b28150000040300483046022100c77e7c40b915f08b88533406d7cfff1d44d7de7733bb5ee1969c425dacb6dacc022100d505eb7d5eff87037203ea4cb8b55ae98c16495070d63f035082025cbcf1d032
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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