mta-sts.usuhs.edu

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 4f:36:48:fd:bd:e2:fd:62:12:2a:b8:2a:ad:3f:05:40 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mta-sts.usuhs.edu

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4f:36:48:fd:bd:e2:fd:62:12:2a:b8:2a:ad:3f:05:40
Serial Number (int): 105290876134352894339766610494018749760
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 4a:97:8a:21:5d:9a:94:29:89:de:0f:38:cc:8d:b9:36:fd:0d:0d:48
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 97:32:cc:eb:5f:a5:85:14:8b:86:24:08:b3:09:d5:2f:ac:6b:54:41
Fingerprint (sha256): 0e:70:49:84:fd:0c:be:3d:9f:ce:4e:f4:92:cf:60:82:c8:3f:fb:6d:0e:50:87:6e:b1:f9:ba:a0:ab:dd:1f:ad

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/ReGc_swgfzY
CRL Distribution Point: http://crls.pki.goog/gts1d4/ZVagZNvG2A0.crl

Check the revocation status for certificate mta-sts.usuhs.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mta-sts.usuhs.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mta-sts.usuhs.edu

Other certificates including the domain name usuhs.edu

(limited to 100 certificates)
www.usuhs.edu
usuasoexweb2.usuhs.edu
www.lrc.usuhs.edu
puppetmaster.usuhs.edu
my.usuhs.edu
CUP-MC-CPC1-PUB.usuhs.edu
www.usuhs.edu
portfolio.usuhs.edu
echo-ess.usuhs.edu
usuhs-vh-03.usuhs.edu
carlosdev.usuhs.edu
er.lrc.usuhs.edu
desxi28.usuhs.edu
usuhs-vdi-03.usuhs.edu
scholar.usuhs.edu
drupal-centers.usuhs.edu
stage-fac-dev.usuhs.edu
CUCM-MC-CPC1-TFTP-01.USUHS.EDU
mneat.usuhs.edu
usuhs-vdi-01.usuhs.edu
lmsdev.usuhs.edu
desxi32.usuhs.edu
stage-sakai.usuhs.edu
news.usuhs.edu
www.usuhs.edu
eduapp1.usuhs.edu
usuimpact.usuhs.edu
usuasodevweb.usuhs.edu
stage-fac-dev.usuhs.edu
stage-redcap.usuhs.edu
ususecureauth2.usuhs.edu
caslocator.usuhs.edu
usu-awx.usuhs.edu
slides.usuhs.edu
canvas.usuhs.edu
eduapp2.usuhs.edu
usu-conn-srv-02.usuhs.edu
desxi29.usuhs.edu
usuexweb2.usuhs.edu
usuasostage.usuhs.edu
lrc2.usuhs.edu
CUCM-MC-CPC1-TFTP-01.USUHS.EDU
cas.usuhs.edu
slides.usuhs.edu
usuhs-voip-02n.usuhs.edu
content.usuhs.edu
cfapps.usuhs.edu
kcoeus.usuhs.edu
usuasoweb.usuhs.edu
servicenow.usuhs.edu
panopto.usuhs.edu
dental.usuhs.edu
im.usuhs.edu
lb.usuhs.edu
doc.lrc.usuhs.edu
usuexweb1.usuhs.edu
usuasoexweb2.usuhs.edu
usuasostage.usuhs.edu
certificates.usuhs.edu
usuasoexweb2.usuhs.edu
pathslide1.usuhs.edu
*.lrc29.usuhs.edu
usuexweb1.usuhs.edu
usuasodevweb.usuhs.edu
eduapp2.usuhs.edu
usuhs-voip-04a.usuhs.edu
www.usuhs.edu
erdev.lrc.usuhs.edu
cac.cas.usuhs.edu
ususolarwinds.usuhs.edu
mta-sts.usuhs.edu
usuhs-biz.usuhs.edu
usuasoexweb2.usuhs.edu
CER-MC-CPC1-SUB.USUHS.EDU
iwcp.usuhs.edu
*.lrc28.usuhs.edu
usuexweb1.usuhs.edu
cf2.usuhs.edu
usuaperio1.usuhs.edu
CUP-MC-CPC1-PUB.usuhs.edu
epicc.usuhs.edu
my.usuhs.edu
redcap.usuhs.edu
epicc.usuhs.edu
www.lrc.usuhs.edu
usuasoexweb1.usuhs.edu
usuhs-vh-01.usuhs.edu
stage-sakai.usuhs.edu
usuexweb2.usuhs.edu
maintenance.lrc.usuhs.edu
er.lrc.usuhs.edu
www.usuhs.edu
apps.usuhs.edu
content.usuhs.edu
usuehshpserver.usuhs.edu
stage-drupal-centers.usuhs.edu
foreman.usuhs.edu
lrc-web.usuhs.edu
ncdmph.usuhs.edu
RCS28.lrc.usuhs.edu

Certificate

The complete raw certificate details for mta-sts.usuhs.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFZTCCBE2gAwIBAgIQTzZI/b3i/WISKrgqrT8FQDANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzETMBEGA1UEAxMKR1RTIENBIDFENDAeFw0yMzEyMjkwNDIwMDhaFw0yNDAzMjgw
NTE1MDNaMBwxGjAYBgNVBAMTEW10YS1zdHMudXN1aHMuZWR1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf0JAe4CVgYWpea3WdyI6jyeQGCds+XXupAV
A5uSz8jsdTfxVwK48EOaso2SQDpc3A2bF0y6QH+W3g3SnMCEUkyUp+ZA9T4h23m9
MRO75wrr+U9rdT6yFCWcgLy8WwiEmlk66QNnhLhDK+kyZtoA3xjHjCUUt0NdHkfz
Xi8tzVV4RgISfVMCBeCLGix6xKmV09C2PV0EtvcTPkdYqu3+8jbRBQ0D2IZKwxcS
0JWXkX0hVS0Th4EMYcBK2rMnfXy7DCCJ7UiV3bE8P0H0seTBka+tnQcFl+xyB/NI
fCTfJd+rkh0WDa0aNU+kEb18oS91JWRSeAUzqlGCnuE3FnAsUwIDAQABo4ICdzCC
AnMwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB
/wQCMAAwHQYDVR0OBBYEFEqXiiFdmpQpid4POMyNuTb9DQ1IMB8GA1UdIwQYMBaA
FCXiGA6yV5GUKuXUXYaQg95Ts7iSMHgGCCsGAQUFBwEBBGwwajA1BggrBgEFBQcw
AYYpaHR0cDovL29jc3AucGtpLmdvb2cvcy9ndHMxZDQvUmVHY19zd2dmelkwMQYI
KwYBBQUHMAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0czFkNC5kZXIw
HAYDVR0RBBUwE4IRbXRhLXN0cy51c3Vocy5lZHUwIQYDVR0gBBowGDAIBgZngQwB
AgEwDAYKKwYBBAHWeQIFAzA8BgNVHR8ENTAzMDGgL6AthitodHRwOi8vY3Jscy5w
a2kuZ29vZy9ndHMxZDQvWlZhZ1pOdkcyQTAuY3JsMIIBAwYKKwYBBAHWeQIEAgSB
9ASB8QDvAHYAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGMtAP6
TgAABAMARzBFAiEAoUVd62f/llEGGPyTm6Avp75lYKRMwqtsfy06oGUbIPECIHwk
GlZNRezZbloLNjAqCK285vJJ/JVifAVkwT4ZB8usAHUAVYHUwhaQNgFK6gubVzxT
8MDkOHhwJQgXL6OqHQcT0wwAAAGMtAP6QQAABAMARjBEAiBwJ74/LFwIDanviQ2H
ulK9hQJ/2LIlrfaefxjEXG5zcwIgarrqeTFoiCgu9DjbPdUNPkF18BbDIMhliEQJ
V+98cMowDQYJKoZIhvcNAQELBQADggEBAG7phUVdsM4qk9LBFHZnUZRGNNmQMLo9
TkOpMcIi7kBbdFWU2IAtHYtiw9HlQfUSTmjfrSei2894Y7QLsEon21OqHt/GXDr0
MVec54pDEOp3JVnGv+V9IIwDVocSf1LaHRF8QalZgu8obSVU5+YlE5OPIg34FhVl
+d7XGmGndaZ6xGcHVXicPCj8s+SSZHdcezs0bkZph2DnxkWgGU6jBWYC3d+netiv
H+L56IH8XMo/HpCITvuErX2lyudb6JymJqG6kfXoUEy26Fz0PIrmw/hpO2bZza+6
Ov6gFTx6PArj5ndvad1NAKCCRxOnJb8PZNFF0pJp5cDwLnvaZLYETQU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf0JAe4CVgYWpea3WdyI
6jyeQGCds+XXupAVA5uSz8jsdTfxVwK48EOaso2SQDpc3A2bF0y6QH+W3g3SnMCE
UkyUp+ZA9T4h23m9MRO75wrr+U9rdT6yFCWcgLy8WwiEmlk66QNnhLhDK+kyZtoA
3xjHjCUUt0NdHkfzXi8tzVV4RgISfVMCBeCLGix6xKmV09C2PV0EtvcTPkdYqu3+
8jbRBQ0D2IZKwxcS0JWXkX0hVS0Th4EMYcBK2rMnfXy7DCCJ7UiV3bE8P0H0seTB
ka+tnQcFl+xyB/NIfCTfJd+rkh0WDa0aNU+kEb18oS91JWRSeAUzqlGCnuE3FnAs
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 105290876134352894339766610494018749760
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-29 04:20:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-28 05:15:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mta-sts.usuhs.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23983815939127809224769638947058569298388453023568262417830065684891076917094912977573151675208727675446715002871469833497654398609791781788173863147637582278607700250507484994867893616067946458686001098446476991169952026304893444986797185499939458881713280768378745851788933643200668619309891292619966535155761511892402070825613827923708342961752693501239311590190513046455913803294681808312205300028161916087182003567744780222443964387249757439224291601398966830256231094536235729543257811534031123648005239779537478391288898660319725219340686181607632895914988028478771945442344864741802547204322521141814320180307
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a978a215d9a942989de0f38cc8db936fd0d0d48
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/ReGc_swgfzY'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mta-sts.usuhs.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/ZVagZNvG2A0.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018cb403fa4e0000040300473045022100a1455deb67ff96510618fc939ba02fa7be6560a44cc2ab6c7f2d3aa0651b20f102207c241a564d45ecd96e5a0b36302a08adbce6f249fc95627c0564c13e1907cbac0075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000018cb403fa41000004030046304402207027be3f2c5c080da9ef890d87ba52bd85027fd8b225adf69e7f18c45c6e737302206abaea79316888282ef438db3dd50d3e4175f016c320c86588440957ef7c70ca
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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