uk.cygnett.com

Issued by GlobalSign Domain Validation CA - SHA256 - G3

About this certificate

This digital certificate with serial number 46:80:1e:75:f6:0f:ee:40:5a:47:75:a1 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=uk.cygnett.com,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 46:80:1e:75:f6:0f:ee:40:5a:47:75:a1
Serial Number (int): 21818837039399022276611896737
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: e5:89:6c:c4:ad:27:39:8d:82:06:8e:2f:27:d5:f3:6b:06:81:7a:cf
AuthorityKeyId: 3d:80:82:79:c5:48:82:a3:c3:12:ee:df:99:0f:57:35:48:9e:d0:cb

Fingerprint (sha1): 79:d3:92:71:85:c9:37:32:af:eb:4f:24:da:e0:db:9e:3a:44:71:34
Fingerprint (sha256): 11:6b:b4:6e:54:d0:bd:d3:78:e1:9c:7c:7d:01:99:53:ff:cd:27:b3:d1:28:5a:5f:58:3a:4b:4f:f8:b1:8e:0f

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalsha2g3
CRL Distribution Point: http://crl.globalsign.com/gsdomainvalsha2g3.crl

Check the revocation status for certificate uk.cygnett.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uk.cygnett.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uk.cygnett.com

Other certificates including the domain name cygnett.com

(limited to 100 certificates)
uk.cygnett.com
uk.cygnett.com
www.cygnett.com
uk.cygnett.com
cygnett.com
www.cygnett.com
us.cygnett.com
uk.cygnett.com
cygnett.com
uk.cygnett.com
cygnett.com
us.cygnett.com
www.cygnett.com
us.cygnett.com
uk.cygnett.com
us.cygnett.com
us.cygnett.com
cygnett.com
uk.cygnett.com
uk.cygnett.com
www.cygnett.com
cygnett.com
us.cygnett.com
cygnett.com
www.cygnett.com
www.cygnett.com
www.us.cygnett.com
www.cygnett.com
www.us.cygnett.com
cygnett.com
remote.cygnett.com
www.cygnett.com
remote.cygnett.com
au.cygnett.com
www.cygnett.com
www.cygnett.com
us.cygnett.com
us.cygnett.com
us.cygnett.com
www.cygnett.com
us.cygnett.com
uk.cygnett.com
uk.cygnett.com
au.cygnett.com
www.us.cygnett.com
us.cygnett.com
uk.cygnett.com
us.cygnett.com
cygnett.com
uk.cygnett.com
cygnett.com
www.us.cygnett.com
cygnett.com
remote.cygnett.com
remote.cygnett.com
cygnett.com
us.cygnett.com
au.cygnett.com
us.cygnett.com
uk.cygnett.com
au.cygnett.com
uk.cygnett.com
uk.cygnett.com
us.cygnett.com
uk.cygnett.com
www.us.cygnett.com
www.cygnett.com
uk.cygnett.com
cygnett.com
www.cygnett.com
cygnett.com
www.us.cygnett.com
www.cygnett.com
cygnett.com
www.cygnett.com
www.us.cygnett.com
www.us.cygnett.com
owa.cygnett.com
us.cygnett.com
us.cygnett.com
support.cygnett.com
au.cygnett.com
support.cygnett.com
cygnett.com
uk.cygnett.com
cygnett.com
uk.cygnett.com
www.us.cygnett.com
au.cygnett.com
us.cygnett.com
cygnett.com
uk.cygnett.com
au.cygnett.com
support.cygnett.com
*.cygnett.com
www.cygnett.com
www.cygnett.com
www.cygnett.com
au.cygnett.com
uk.cygnett.com

Certificate

The complete raw certificate details for uk.cygnett.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF9DCCBNygAwIBAgIMRoAedfYP7kBaR3WhMA0GCSqGSIb3DQEBCwUAMGAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTYwNAYDVQQDEy1H
bG9iYWxTaWduIERvbWFpbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0gRzMwHhcN
MTkwOTIxMTcxNTM4WhcNMjAwOTIxMTcxNTM4WjA8MSEwHwYDVQQLExhEb21haW4g
Q29udHJvbCBWYWxpZGF0ZWQxFzAVBgNVBAMTDnVrLmN5Z25ldHQuY29tMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnn9mVaE5W59aoo1TT8sJOLjHHDW1
o+pxlIIHeU013alA6A2AD4xaDcvSbs7hv8Kh7f1vYiQ5s3Y1RR6V9AfkETgga5pc
Y55vn3jlFDCunHIF1BWmiiZMDMWrrOiprUY0dLj28SHaoZdjViLzuSzAi7tPHpBu
rcKqyqRWf9UaPCXdXYIXjL8aGE+xs2hPGpf8fpotbciF6qsEV7ZfPyOSGtazxtR+
s+FkY0ocKUo3VuOpqjW3zlz9mt7Af4bd9m6PxPJqFi9LawEKNT+TMreYWman6dxv
PeLID+M4DmmB34WtF/ENo+xLhXBqdz9DmdNQfTAktKPlSyYe3dUvgvIvWQIDAQAB
o4IC0DCCAswwDgYDVR0PAQH/BAQDAgWgMIGSBggrBgEFBQcBAQSBhTCBgjBFBggr
BgEFBQcwAoY5aHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvZ3Nk
b21haW52YWxzaGEyZzMuY3J0MDkGCCsGAQUFBzABhi1odHRwOi8vb2NzcDIuZ2xv
YmFsc2lnbi5jb20vZ3Nkb21haW52YWxzaGEyZzMwVgYDVR0gBE8wTTBBBgkrBgEE
AaAyAQowNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20v
cmVwb3NpdG9yeS8wCAYGZ4EMAQIBMAkGA1UdEwQCMAAwQAYDVR0fBDkwNzA1oDOg
MYYvaHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9nc2RvbWFpbnZhbHNoYTJnMy5j
cmwwGQYDVR0RBBIwEIIOdWsuY3lnbmV0dC5jb20wHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFD2AgnnFSIKjwxLu35kPVzVIntDLMB0G
A1UdDgQWBBTliWzErSc5jYIGji8n1fNrBoF6zzCCAQQGCisGAQQB1nkCBAIEgfUE
gfIA8AB1AId1v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMPAAABbVTSc/kA
AAQDAEYwRAIgZKs+regyj+4CVzUFcsBsS7LYYRxggY4YzamoLL3hv+ECIF8MvHIP
tId3QKyTVn/v/Z40F4VrsLTH5EcAyhDATEbRAHcAsh4FzIuizYogTodm+Su5iiUg
Z2va+nDnsklTLe+LkF4AAAFtVNJwwgAABAMASDBGAiEAuhMVrp8KXoC8MrAjh6aP
kReZDBGrpLXd063UM+kpEEgCIQChKBmTqO+oa71uPQ7eZgrOzCNdEwNscHG5EkjG
vVBLfDANBgkqhkiG9w0BAQsFAAOCAQEALdSPmTp+Yc0r817N1YSdaoa7C8XH0ZTh
jtxA8fELTiyTHGWQK5oWy1ZTKW0mMA5SNIKX8F+Gw1WD6ssuQ9MaV9p03ug/DKmb
Zja4tkvNw4E45WHFbdSlnAAzpWQs6ZliKQ5iT/PfRZt7Yh1rgRJSFI3wyKxXDAsb
YrlsLsdTj60FRs2pjAFSS7Jy2L2vWr6tLCdN43AMp/45jooWXHn9AfOogEdPjxHS
TpHNfw1bQBE170th4xnqBWJtdfWQBJ/5KBaE4lC5cbxPoCnggQZB1z8wjcVKNem7
ECYS38clmjD8/9Xd7dXTCpBTvIR7iO+xK9pX/fR5Za1pCLCCirDbew==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnn9mVaE5W59aoo1TT8sJ
OLjHHDW1o+pxlIIHeU013alA6A2AD4xaDcvSbs7hv8Kh7f1vYiQ5s3Y1RR6V9Afk
ETgga5pcY55vn3jlFDCunHIF1BWmiiZMDMWrrOiprUY0dLj28SHaoZdjViLzuSzA
i7tPHpBurcKqyqRWf9UaPCXdXYIXjL8aGE+xs2hPGpf8fpotbciF6qsEV7ZfPyOS
GtazxtR+s+FkY0ocKUo3VuOpqjW3zlz9mt7Af4bd9m6PxPJqFi9LawEKNT+TMreY
Wman6dxvPeLID+M4DmmB34WtF/ENo+xLhXBqdz9DmdNQfTAktKPlSyYe3dUvgvIv
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21818837039399022276611896737
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-21 17:15:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-21 17:15:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uk.cygnett.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20008475339907374092726889699245822106136775756762742814463866585512781019750071746856658585459275172540179125315147994345744417198600227854095119983029073785639131665839043817617867577398722018594375842317264546051332888570541652830025123916004203469993007366381373115178051422764857483352918081872310153724873889992097550792342854320656765607090329984966656836525483719434744076469108240303909467037762399147337031256022095048523665472008279208139427720388523934076955565223892813397666325923724785900567393896710826613659829409709401877274732461909201877698431218746945436905822875180907927078376289416752894455641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsdomainvalsha2g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.cygnett.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3d808279c54882a3c312eedf990f5735489ed0cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e5896cc4ad27398d82068e2f27d5f36b06817acf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016d54d273f90000040300463044022064ab3eade8328fee0257350572c06c4bb2d8611c60818e18cda9a82cbde1bfe102205f0cbc720fb4877740ac93567feffd9e3417856bb0b4c7e44700ca10c04c46d1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016d54d270c20000040300483046022100ba1315ae9f0a5e80bc32b02387a68f9117990c11aba4b5ddd3add433e9291048022100a1281993a8efa86bbd6e3d0ede660acecc235d13036c7071b91248c6bd504b7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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