naturparklillebaelt-vidi.mapcentia.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:63:ab:99:32:dd:1a:58:88:83:f1:16:f9:16:86:ec:6e:e7 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=naturparklillebaelt-vidi.mapcentia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:63:ab:99:32:dd:1a:58:88:83:f1:16:f9:16:86:ec:6e:e7
Serial Number (int): 295252905560790282004278659171694821535463
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 15:3f:35:a9:05:80:b8:81:9d:27:ae:34:8d:f8:78:1c:d5:a0:38:41
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d6:d8:f4:ac:f3:01:b5:2c:74:79:16:28:3a:e1:02:0d:b4:21:e2:16
Fingerprint (sha256): 11:cf:3e:82:ac:6e:6f:c1:56:57:c7:ab:fe:c7:64:07:72:01:fc:76:d2:41:57:07:a8:0e:6c:a1:8c:51:52:54

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate naturparklillebaelt-vidi.mapcentia.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for naturparklillebaelt-vidi.mapcentia.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

marsvin.naturparklillebaelt.dk
naturparklillebaelt-vidi.mapcentia.com

Other certificates including the domain name mapcentia.com

(limited to 100 certificates)
drayton.mapcentia.com
vidi-furesoe.mapcentia.com
cowi-vidi.mapcentia.com
geofyn.mapcentia.com
vidi-dragoer.mapcentia.com
geofyn.mapcentia.com
odder.mapcentia.com
vidi.mapcentia.com
eu1.mapcentia.com
rm.mapcentia.com
watsonc.mapcentia.com
geofyn.mapcentia.com
*.mapcentia.com
fkg.mapcentia.com
vidi-furesoe.mapcentia.com
assens.mapcentia.com
dragoer.mapcentia.com
geofyn.mapcentia.com
drayton.mapcentia.com
cowi-konflikt.mapcentia.com
ballerup-vidi.mapcentia.com
naturparklillebaelt-vidi.mapcentia.com
naturparklillebaelt-vidi.mapcentia.com
vidi-dragoer.mapcentia.com
vidi-furesoe.mapcentia.com
blog.mapcentia.com
dragoer.mapcentia.com
assens.mapcentia.com
furesoe.mapcentia.com
ballerup-vidi.mapcentia.com
geofyn.mapcentia.com
cowi.mapcentia.com
drayton.mapcentia.com
rm-vidi.mapcentia.com
rm.mapcentia.com
vidi-geokon.mapcentia.com
odder-vidi.mapcentia.com
*.mapcentia.com
odder-vidi.mapcentia.com
ballerup.mapcentia.com
drayton.mapcentia.com
cowi-vidi.mapcentia.com
vidi.mapcentia.com
furesoe.mapcentia.com
ballerup.mapcentia.com
eu1.mapcentia.com
assens.mapcentia.com
furesoe.mapcentia.com
cowi.mapcentia.com
rm.mapcentia.com
vidi-furesoe.mapcentia.com
vidi-dragoer.mapcentia.com
watsonc.mapcentia.com
geofyn.mapcentia.com
assens-vidi.mapcentia.com
cowi-konflikt.mapcentia.com
cowi-vidi.mapcentia.com
naturparklillebaelt-vidi.mapcentia.com
assens.mapcentia.com
geofyn.mapcentia.com
cowi.mapcentia.com
fkg-kort.mapcentia.com
eu1.mapcentia.com
gc2.mapcentia.com
furesoe.mapcentia.com
cowi.mapcentia.com
rm.mapcentia.com
gc2.mapcentia.com
assens.mapcentia.com
assens.mapcentia.com
drayton.mapcentia.com
vidi.mapcentia.com
furesoe.mapcentia.com
cowi.mapcentia.com
cowi-konflikt.mapcentia.com
vidi-geokon.mapcentia.com
odder-vidi.mapcentia.com
*.mapcentia.com
vidi-geokon.mapcentia.com
dragoer.mapcentia.com
cowi.mapcentia.com
vidi-dragoer.mapcentia.com
cowi-konflikt.mapcentia.com
cowi-vidi.mapcentia.com
gc2.mapcentia.com
eu1.mapcentia.com
vidi-furesoe.mapcentia.com
rm.mapcentia.com
fkg-kort.mapcentia.com
assens-vidi.mapcentia.com
fkg-kort.mapcentia.com
odder.mapcentia.com
furesoe.mapcentia.com
vidi.mapcentia.com
fkg.mapcentia.com
geofyn.mapcentia.com
vidi-geokon.mapcentia.com
watsonc.mapcentia.com
cowi.mapcentia.com
ballerup-vidi.mapcentia.com

Certificate

The complete raw certificate details for naturparklillebaelt-vidi.mapcentia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGozCCBYugAwIBAgISA2OrmTLdGliIg/EW+RaG7G7nMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEyMTkwNDI3MzZaFw0x
OTAzMTkwNDI3MzZaMDExLzAtBgNVBAMTJm5hdHVycGFya2xpbGxlYmFlbHQtdmlk
aS5tYXBjZW50aWEuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
zggO+nrIfv9nHWABQH8fWqXuFfb3fnwUxXwimSvDBSrEVTcAqYq+Jc30+CV5W42r
LHgp4WcClR1cIcUEp9qFfQabYmlDmJEPk0FSrVdb0DHq2umTFIIcWPeqWQEIvEgx
wGRmOl91YeMOenqlwA82vZoKTWLaWaa3zYsa4BpYARorrXB6phxe3ByWshBKjQDU
LoztKml2nLweN9FX1JFoVPKRsnKMkDnnBCzoOReYIHvExXubFB1t7KpHJwovR2UN
o0lT/OB9X4Rf4hKk+nOk5xwTmkqtQtpzgg0bJgYyZnZOVqeK3wsS+jNrcltWqQCo
lGt2iVeiY2qVdcytdInmJzUA0v/rs2ngnZv5ge/yIlqpEK6ajY7ejSBId4P4GijM
rWs7/LU594OatAMuJ55Ht3naz0LHn0KWLhbHQkuTeiNGQHDlPETd5raxokAQTk6I
MD0uxGyz4XmuIU7wZZcRfXb/l5nF0rquzhon/mT7coGnKfpwbZhY5w4s9gUSJ/dA
VAKaaGjVg8PnwnL4xkLtlBvO6+iEQi7FJg+oZztKsdsFaRP/Vu3pGSeFNb4RBlIN
5VMOpUfBS5nJ+ZpYLnk5D6xPWXU/EFS0+2tbyhKnQ6r566C/BlzwMQSpQVGti0u+
DDDIRu7aGimr0QX+DvdzWwVrXsBCTxvEK0zt9a29rHsCAwEAAaOCApowggKWMA4G
A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYD
VR0TAQH/BAIwADAdBgNVHQ4EFgQUFT81qQWAuIGdJ640jfh4HNWgOEEwHwYDVR0j
BBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsG
AQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsG
AQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzBRBgNV
HREESjBIgh5tYXJzdmluLm5hdHVycGFya2xpbGxlYmFlbHQuZGuCJm5hdHVycGFy
a2xpbGxlYmFlbHQtdmlkaS5tYXBjZW50aWEuY29tMEwGA1UdIARFMEMwCAYGZ4EM
AQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0
c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYAdH7agzGtMxCR
IZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFnxO8AeQAABAMARzBFAiEAklqB7VVZ
c1+9Jn8oA9ukvtlP8YuMaHD1YpCHoXOdPvgCIHqAqfyZ70vrkicWvT53vTlUUHMw
2megqWWxbEpEapxFAHUAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL2I0A
AAFnxO8AaAAABAMARjBEAiBpbh48dJuWiVCVkG3EXb6I8JvjSEiROn1nyiVZp/3N
RwIgc03ak1axLwCEugrKnC+fgc4Q7SsiCK3Jzq8cezjkm3AwDQYJKoZIhvcNAQEL
BQADggEBAFBw+2lVx7A3TFX8sROxhtFFxNYRVDvsUBf/PJhAF3Zb0zmpLSc+0g0q
o6KlSR8k7GNT6+crPlvmi9nwr/LdXoFy5hc8uWTl9uo+FPv0yZNyS3T+LvOzpdBa
FKAYYSJiOSKog0LnJBxpwszDZ1C5FfvON5UJMSsfs2P9ZjDflgbz0q8puVVr5df2
3PU+zWhGH4kmI4uANkBjZ4Wt0+O1FB3UzSi9y3jHsTvesNt4Jkn5rPRWvogOuRMo
VT1zT9PbTugxLWvhRibOeGaDAlrUBKK4uBvGvvdkqAOSvN4kJS21DZsk1BVNFjpr
Mmiefxb9ycpgQJDFyiTDlBTapG7OZzg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295252905560790282004278659171694821535463
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-19 04:27:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-19 04:27:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'naturparklillebaelt-vidi.mapcentia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 840535099303329228197680048259634841143793808410646413103615484303222202348680747431194120243549738257011823391349489757292060098871965193185078844889000453114140721388804355114497385769187710635227715058917275398057480654793007300188343154930853715809865057064513708909841184221180329879537717819585914911827635921688532650790320671076544816592020097162023458743733001697404166334392962734164793048416722535139590027837981620387077561695242375740221009918649694011930645125996199500754606641251580372124473904315998683577429464990660699561272915665522115325566615786918142368915668768102237901350940743379375712335633414278930438340156495319233983219278276280532358502887807697303809592733362535267247112267995953651844327091808965261214620108190163869053122160610453533912391848749421966469565172344241577159714462325945005473872142160448158851212751555311923901057024418532177222578403805076200284875387166023721772551747300173583368688995001442286171528705707658692193349242795745354343467119810702798830072550141613222541292718382691034812424930542932373749802811539315130023594583157038598807212422904679447016578170004522352131234452919758160294749428932544418461020677221391900468690394195336214133235830847071383723267959931
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							153f35a90580b8819d27ae348df8781cd5a03841
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsvin.naturparklillebaelt.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturparklillebaelt-vidi.mapcentia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000167c4ef00790000040300473045022100925a81ed5559735fbd267f2803dba4bed94ff18b8c6870f5629087a1739d3ef802207a80a9fc99ef4beb922716bd3e77bd3954507330da67a0a965b16c4a446a9c4500750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000167c4ef006800000403004630440220696e1e3c749b96895095906dc45dbe88f09be34848913a7d67ca2559a7fdcd470220734dda9356b12f0084ba0aca9c2f9f81ce10ed2b2208adc9ceaf1c7b38e49b70
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005070fb6955c7b0374c55fcb113b186d145c4d611543bec5017ff3c984017765bd339a92d273ed20d2aa3a2a5491f24ec6353ebe72b3e5be68bd9f0aff2dd5e8172e6173cb964e5f6ea3e14fbf4c993724b74fe2ef3b3a5d05a14a0186122623922a88342e7241c69c2ccc36750b915fbce379509312b1fb363fd6630df9606f3d2af29b9556be5d7f6dcf53ecd68461f8926238b803640636785add3e3b5141dd4cd28bdcb78c7b13bdeb0db782649f9acf456be880eb91328553d734fd3db4ee8312d6be14626ce786683025ad404a2b8b81bc6bef764a80392bcde24252db50d9b24d4154d163a6b32689e7f16fdc9ca604090c5ca24c39414daa46ece6738