partner.secureauth.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:be:64:08:35:62:4b:02:aa:bc:47:06:10:66:b7:6a:be:7f was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=partner.secureauth.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:be:64:08:35:62:4b:02:aa:bc:47:06:10:66:b7:6a:be:7f
Serial Number (int): 326123472930967691383624368302173933190783
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4a:12:c2:f2:ac:f9:c0:cf:20:e7:18:b6:42:a8:85:2e:e9:73:4f:2b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 97:f5:bb:40:ba:29:35:20:74:13:14:54:55:e1:e1:51:80:be:8a:fc
Fingerprint (sha256): 10:26:7c:9e:0a:1d:8f:e1:43:60:37:5f:0a:16:a5:26:50:cf:91:28:f6:6e:6e:df:e4:91:80:8a:5e:17:df:16

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate partner.secureauth.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for partner.secureauth.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fishnet.secureauth.com
optiv.secureauth.com
partner.secureauth.com
partners.secureauth.com
projects.secureauth.com
riverbed.secureauth.com

Other certificates including the domain name secureauth.com

(limited to 100 certificates)
ss.stg.secureauth.com
now.phtech.com
partner.secureauth.com
helpdesk.fintonhouse.org.uk
cpk.secureauth.com
helpdesk.fintonhouse.org.uk
now.phtech.com
now.phtech.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
*.saas.secureauth.com
now.phtech.com
now.phtech.com
now.phtech.com
helpdesk.fintonhouse.org.uk
*.dev.secureauth.com
now.phtech.com
helpdesk.fintonhouse.org.uk
servicedesk.massageenvy.com
partner.secureauth.com
now.phtech.com
helpdesk.fintonhouse.org.uk
www2.secureauth.com
helpdesk.fintonhouse.org.uk
*.stg.secureauth.com
ss.secureauth.com
mobile.secureauth.com
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
*.sb1.secureauth.com
helpdesk.fintonhouse.org.uk
access.secureauth.com
stg.authsrv.net
servicedesk.massageenvy.com
now.phtech.com
now.phtech.com
now.phtech.com
partner.secureauth.com
now.phtech.com
helpdesk.fintonhouse.org.uk
ajusdsupport.ajusd.org
now.phtech.com
sep.secureauth.com
*.stg.secureauth.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
partner.secureauth.com
servicedesk.massageenvy.com
www2.secureauth.com
www.secureauth.com
now.phtech.com
Irv1.secureauth.com
support.secureauth.com
now.phtech.com
now.phtech.com
now.phtech.com
servicedesk.energyexemplar.com
demo.secureauth.com
servicedesk.massageenvy.com
tickets.andirect.org
*.secureauth.com
servicedesk.massageenvy.com
info.secureauth.com
now.phtech.com
docs.secureauth.com
support.mastercardfdn.org
support.secureauth.com
helpdesk.fintonhouse.org.uk
downloads.secureauth.com
helpdesk.mercurymed.com
helpdesk.fintonhouse.org.uk
servicedesk.massageenvy.com
pages.secureauth.com
btm.authsrv.net
helpdesk.fintonhouse.org.uk
now.phtech.com
now.phtech.com
servicedesk.massageenvy.com
docs.secureauth.com
servicedesk.massageenvy.com
now.phtech.com
now.phtech.com
now.phtech.com
helpdesk.naa.edu
helpdesk.fintonhouse.org.uk
helpdesk.countrypure.com
now.phtech.com
now.phtech.com
assetmgmt.jennycraig.com
now.phtech.com
*.stg.secureauth.com
*.secureauth.com
access.secureauth.com
now.phtech.com
helpdesk.fintonhouse.org.uk
servicedesk.massageenvy.com
downloads.secureauth.com
servicedesk.massageenvy.com
servicedesk.mazakcorp.com
servicedesk.massageenvy.com

Certificate

The complete raw certificate details for partner.secureauth.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF3zCCBMegAwIBAgISA75kCDViSwKqvEcGEGa3ar5/MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDA0MDEyMjAyNDJaFw0y
MDA2MzAyMjAyNDJaMCExHzAdBgNVBAMTFnBhcnRuZXIuc2VjdXJlYXV0aC5jb20w
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1lTrWll9W+BgkS2Gn3CuA
M02OduWVwf5vwkZlFk+x/55r17Cf7OEkr4GFpFRQFZYivjKqQt/5DZyd4KL8oKE6
Sezatmy+UY0FBgH+fY0ytHD4OaEIJKSIhtME2g/ofVWGf6pWnQn1f5Z9DpDJEfZ8
OjlEj0I1nn1L9P9i802n1YshSVPp+92DYEF8GVvuPOr/jjvqN7iB8NIqesSnFsxq
e4I7DtGEgMDidkePNQRt6q5pJ4l1P9hkISm/sp/41jq3eBk7s9woIfLFAV+7keHf
Nba44DiXjCEMk4U9WBBA4CdUBqKKxXHcTzUohN291dVsxa7BquHqctyuX2xwzVzn
AgMBAAGjggLmMIIC4jAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFEoSwvKs+cDPIOcY
tkKohS7pc08rMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsG
AQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNl
bmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNl
bmNyeXB0Lm9yZy8wgZwGA1UdEQSBlDCBkYIWZmlzaG5ldC5zZWN1cmVhdXRoLmNv
bYIUb3B0aXYuc2VjdXJlYXV0aC5jb22CFnBhcnRuZXIuc2VjdXJlYXV0aC5jb22C
F3BhcnRuZXJzLnNlY3VyZWF1dGguY29tghdwcm9qZWN0cy5zZWN1cmVhdXRoLmNv
bYIXcml2ZXJiZWQuc2VjdXJlYXV0aC5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEw
NwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5j
cnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQDwlaRZ8gDRgkAQLS+T
iI6tS/4dR+OZ4dA0prCoqo6ycwAAAXE3+4VXAAAEAwBGMEQCIEDInkwOmpjIVWyj
UT7DIdik9uTC/j2eWi3ZV2pW7SeSAiAiMPjpOQbGvae9YLK8KPZVMagPKYNVLNqy
xGcwAZu3MAB2ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABcTf7
hU4AAAQDAEcwRQIgA/LylwkrCBOoy/wXgXPdGGNG8Ymxl5GC4BZrp4xCNYsCIQDm
tK6G2/liHyB3JzKgxQDhXo04FTo+x5F8K5g6n4IbQTANBgkqhkiG9w0BAQsFAAOC
AQEAH97V8SovyFrJJIhksLNAxR6h5u7aa8QPZbDvhyPxraDj48LTB0TV3DJMQyYR
dqTjvYD3Wu3g9Oh5vJqHnEDqaC/Ht3FNJOCcj3WkWLQGehAuLklfri9pAr2Ia33c
2Er1PKEe3EcsBZJxmOmhwRgDJZnnMuO5WeARgOtb51vEI7sO862ApChdW3fMuL3c
rGnBuyvKFnn/GRnt6pg3ljfqalNcha1XDENUpY97P5H+UP9MWbthWtH4gH9eQid3
4vcpBoYyEfZdtxHTrP3wYcWSkSmVSZMQL8pk9tVCBRxMTBuMd1hGyyt/qtG+S5n3
ZCi8VxmY0FW4EvTEA3my46Dzhw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZU61pZfVvgYJEthp9wr
gDNNjnbllcH+b8JGZRZPsf+ea9ewn+zhJK+BhaRUUBWWIr4yqkLf+Q2cneCi/KCh
Okns2rZsvlGNBQYB/n2NMrRw+DmhCCSkiIbTBNoP6H1Vhn+qVp0J9X+WfQ6QyRH2
fDo5RI9CNZ59S/T/YvNNp9WLIUlT6fvdg2BBfBlb7jzq/4476je4gfDSKnrEpxbM
anuCOw7RhIDA4nZHjzUEbequaSeJdT/YZCEpv7Kf+NY6t3gZO7PcKCHyxQFfu5Hh
3zW2uOA4l4whDJOFPVgQQOAnVAaiisVx3E81KITdvdXVbMWuwarh6nLcrl9scM1c
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326123472930967691383624368302173933190783
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-01 22:02:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-30 22:02:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'partner.secureauth.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22922721174065661416564740472132878662987671550630037466806654221329799742387647203960840730392626507212113328324152218003589713832684601560358704470240159933738453521452028492526788830809670542908569609978570198560311520696858381346004944166595591684895232416997460863611473553599757235494095522654420182720190155238303054470062448512015547576787443521773747887200921641407535905408936273880755434888192236267481688614741743237769141708140110672032058480768671024001794581253385711584840649066290503777316653915752903231729317435256162165427581137010995875155892374389421363729673656937998536582856038395284583963879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:1|t:10|false]  
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (148 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fishnet.secureauth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optiv.secureauth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.secureauth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.secureauth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.secureauth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riverbed.secureauth.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000017137fb85570000040300463044022040c89e4c0e9a98c8556ca3513ec321d8a4f6e4c2fe3d9e5a2dd9576a56ed279202202230f8e93906c6bda7bd60b2bc28f65531a80f2983552cdab2c46730019bb730007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017137fb854e0000040300473045022003f2f297092b0813a8cbfc178173dd186346f189b1979182e0166ba78c42358b022100e6b4ae86dbf9621f20772732a0c500e15e8d38153a3ec7917c2b983a9f821b41
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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