lms.gossluzhba.mosreg.ru

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a4:45:0c:0f:42:7c:81:64:84:41:56:52:dc:9b:02:11:89 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lms.gossluzhba.mosreg.ru

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a4:45:0c:0f:42:7c:81:64:84:41:56:52:dc:9b:02:11:89
Serial Number (int): 317234945319089844909068445441853438955913
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 42:5b:32:5b:24:29:74:ef:66:15:4b:ce:e8:84:10:3f:78:fd:4a:ec
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ce:ec:ac:97:30:0e:b4:08:a2:52:9c:30:a6:d7:68:21:73:d9:24:0d
Fingerprint (sha256): 09:28:b3:0c:e4:99:40:41:ff:f7:fe:63:cc:b7:d4:24:34:a2:c8:2d:ac:28:62:20:c7:3c:99:04:cc:67:03:2a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lms.gossluzhba.mosreg.ru

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lms.gossluzhba.mosreg.ru

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lms.gossluzhba.mosreg.ru

Other certificates including the domain name mosreg.ru

(limited to 100 certificates)
docs.mosreg.ru
guv.mosreg.ru
help.dnevnik.ru
sdc.platform.mosreg.ru
klh.mosreg.ru
*.reb.mosreg.ru
pdks.mosreg.ru
mf.reb.mosreg.ru
msh.mosreg.ru
www.atk.mosreg.ru
*.mef.mosreg.ru
isogd.mosreg.ru
ugd.mosreg.ru
socuslugi.mosreg.ru
ud.mosreg.ru
*.sport.mosreg.ru
mosreg.ru
www.zags.mosreg.ru
isogd.mosreg.ru
monitoring.mosreg.ru
mio.mosreg.ru
*.budget.mosreg.ru
lytkarino.mosreg.ru
tasks.mosreg.ru
www.mef.mosreg.ru
pushchino.mosreg.ru
kadry.mosreg.ru
mail.omsu.mosreg.ru
volokolamsk.mosreg.ru
help.pik.mosreg.ru
auth.elib.mosreg.ru
www.guip.mosreg.ru
mz.mosreg.ru
bal.msr.mosreg.ru
kt.reb.mosreg.ru
www.mo.mosreg.ru
docs.mosreg.ru
www.gatn.mosreg.ru
gorskoe.mosreg.ru
tasks.mosreg.ru
news.mosreg.ru
www.klh.mosreg.ru
remote.mosreg.ru
mf.mosreg.ru
msh.mosreg.ru
gs.mosreg.ru
www.mz.mosreg.ru
upss.mosreg.ru
guv.mosreg.ru
dolgoletie.mosreg.ru
dobrodel.mosreg.ru
dolgoletie.mosreg.ru
beta.uslugi.mosreg.ru
uzpp.mosreg.ru
lms.gossluzhba.mosreg.ru
mo.mosreg.ru
mst.mosreg.ru
dop.mosreg.ru
invest.mosreg.ru
www.mio.mosreg.ru
certificate.cogu.mosreg.ru
klim.msr.mosreg.ru
vpn.mosreg.ru
isogd.mosreg.ru
roshal.mosreg.ru
subbotnik.mosreg.ru
dolgoletie.mosreg.ru
isoik.mosreg.ru
minenergo.mosreg.ru
ugd.mosreg.ru
pik.mosreg.ru
docs.mosreg.ru

ktc.mosreg.ru
web.mail.mosreg.ru
remote.mosreg.ru
*.msr.mosreg.ru
roshal.mosreg.ru
www.ktc.mosreg.ru
www.mst.mosreg.ru
gs.mosreg.ru
*.reb.mosreg.ru
webconf.mosreg.ru
www.politika.mosreg.ru
tdn.mosreg.ru
*.reb.mosreg.ru
help.dnevnik.ru
renovation.mosreg.ru
www.gzhi.mosreg.ru
pushchino.mosreg.ru
dom.mosreg.ru
112.rm.mosreg.ru
*.secure.mosreg.ru
dev.vmeste.mosreg.ru
chekhov.mosreg.ru
vmeste.mosreg.ru
docreg.reb.mosreg.ru
rgis.mosreg.ru
new.dop.mosreg.ru
s.pik.mosreg.ru

Certificate

The complete raw certificate details for lms.gossluzhba.mosreg.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgISA6RFDA9CfIFkhEFWUtybAhGJMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA1MDMwNjIyMzZaFw0x
ODA4MDEwNjIyMzZaMCMxITAfBgNVBAMTGGxtcy5nb3NzbHV6aGJhLm1vc3JlZy5y
dTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJkguM5aaU8RzLaKwJjA
bOk//cj93zoSe0NsdlCRHoPelCRHZG0aBGm09f3rn5XSUUDTzAFTtQEbt81PZ9Qj
1MLgt4upPN7aj1w6obC8mXZIWME3eCnCN/wsYwihwDAbK9l7uHGUo8Yb8Z5jtqCw
GZhSXE5/IUdlOvwr3W2E+muRCRAgPnp4w7JhtDYG1QxAje8cD/Y9Vx0zA+1G09OX
Molu9FqGAvnlEBVtd1Ns7WxpT9Dy1UNU1EJZUou5VFPfsmipZBnVTHpYawx08wCB
L/NsQpXT/U4UXAxfmm6I54MzFc1uu88DOO8h/4LbExflzJsPt79hRs16BvJ8CDMj
iEUCAwEAAaOCAyAwggMcMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUQlsyWyQpdO9m
FUvO6IQQP3j9SuwwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI
KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0
c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0
c2VuY3J5cHQub3JnLzAjBgNVHREEHDAaghhsbXMuZ29zc2x1emhiYS5tb3NyZWcu
cnUwgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYG
CCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUH
AgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9u
IGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGgg
dGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNy
eXB0Lm9yZy9yZXBvc2l0b3J5LzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2ANt0
r+7LKeyx/so+cW0s5bmquzb3hHGDx12dTze2H79kAAABYyThoiwAAAQDAEcwRQIg
QZ5yGbomEor7tJaSf9HdVShMpaMkodrqns1T+liJdpUCIQDZlaci0kS0yjd+KTLa
qXrXsHi3LhU48Cb/KQXizu60aAB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM
9OVFR/R4AAABYyThojkAAAQDAEcwRQIgKlloqS/+QdzzuM7VatV5wA5aKUo4ftKq
EzPY/1KI0oICIQDQfHcpWRO84xCuaXsAsKnL4eGkfVnHYLeSCzq5WgUS1DANBgkq
hkiG9w0BAQsFAAOCAQEAc2EPnZk+cTAVQRnJ6zMCkZi54J9rQna7C3Z6/IwKqB3E
vYyDmsuplPXE2J3QKaTRlBCje/qeayw27e3r/CC3U/lPQRYMSq/d9WezBbdOiMpX
Um2l1oEWuKfEQCVqB6Cqf8lrY09tBV5v5D29TrKRCAnDMjUXHJiUyzvSI5U/JdKN
ketQ2VcHjMGYUcpnf2toasPwuYAQGGCMiBnUWd1YYmR7AI7gOtQaAe7pYO5TRTkh
ilqB0w33YjVuYmECdW9ZVpV9GoHkRk6YPVXmGd5/Qsr9pK9vbAsd64NlQarTgJEs
xUy8Q/8vA+LEarh7DrtxjeFZzzSu46T3EzBN2dwbSg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSC4zlppTxHMtorAmMBs
6T/9yP3fOhJ7Q2x2UJEeg96UJEdkbRoEabT1/eufldJRQNPMAVO1ARu3zU9n1CPU
wuC3i6k83tqPXDqhsLyZdkhYwTd4KcI3/CxjCKHAMBsr2Xu4cZSjxhvxnmO2oLAZ
mFJcTn8hR2U6/CvdbYT6a5EJECA+enjDsmG0NgbVDECN7xwP9j1XHTMD7UbT05cy
iW70WoYC+eUQFW13U2ztbGlP0PLVQ1TUQllSi7lUU9+yaKlkGdVMelhrDHTzAIEv
82xCldP9ThRcDF+abojngzMVzW67zwM47yH/gtsTF+XMmw+3v2FGzXoG8nwIMyOI
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317234945319089844909068445441853438955913
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-03 06:22:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-01 06:22:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lms.gossluzhba.mosreg.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19330596429444054920801769052759102164669746900742080324110124898175921941211542011341320372876939012820240054508213912440841046418923617141295237220623682729758922048607923807314594997188305446215067241146811695919581116537093471575639848369743212782411372944223877811674727275057860848683332232734821242690148440066500332158381675081745463791051059762969993613651611398575973216477557721830034441387336862908715706225778433583570504043346775196488050557414108153885519141129699952266193461501438078303406533085323257363847866733372828001666120764087780043927979188941817723376838447976478512927985461245552214902853
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							425b325b242974ef66154bcee884103f78fd4aec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lms.gossluzhba.mosreg.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf640000016324e1a22c00000403004730450220419e7219ba26128afbb496927fd1dd55284ca5a324a1daea9ecd53fa58897695022100d995a722d244b4ca377e2932daa97ad7b078b72e1538f026ff2905e2ceeeb468007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016324e1a239000004030047304502202a5968a92ffe41dcf3b8ced56ad579c00e5a294a387ed2aa1333d8ff5288d282022100d07c77295913bce310ae697b00b0a9cbe1e1a47d59c760b7920b3ab95a0512d4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0073610f9d993e7130154119c9eb33029198b9e09f6b4276bb0b767afc8c0aa81dc4bd8c839acba994f5c4d89dd029a4d19410a37bfa9e6b2c36ededebfc20b753f94f41160c4aafddf567b305b74e88ca57526da5d68116b8a7c440256a07a0aa7fc96b634f6d055e6fe43dbd4eb2910809c33235171c9894cb3bd223953f25d28d91eb50d957078cc19851ca677f6b686ac3f0b9801018608c8819d459dd5862647b008ee03ad41a01eee960ee534539218a5a81d30df762356e626102756f5956957d1a81e4464e983d55e619de7f42cafda4af6f6c0b1deb836541aad380912cc54cbc43ff2f03e2c46ab87b0ebb718de159cf34aee3a4f713304dd9dc1b4a