www.nflshop.com

- NFL Enterprises LLC -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0c:d6:fc:dc:29:c8:6a:9d:95:e1:83:46:e3:d8:42:2b was issued on by DigiCert Inc.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

NFL Enterprises LLC

Organization: NFL Enterprises LLC
Organization unit: NFL Digital Media
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:d6:fc:dc:29:c8:6a:9d:95:e1:83:46:e3:d8:42:2b
Serial Number (int): 17067016087492490990836451354164609579
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f3:d1:9e:1c:d6:7d:2e:5c:41:ae:88:d9:49:de:76:24:f6:a6:71:20
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 1d:42:bf:31:91:3f:ed:3a:ae:f1:64:d8:59:24:d5:fa:f8:06:73:8e
Fingerprint (sha256): 16:2c:4c:6e:10:79:f9:d7:7f:84:eb:f1:20:7a:67:9c:02:45:9b:2e:20:52:ec:47:40:ab:43:a2:c6:30:79:81

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate www.nflshop.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nflshop.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nflshop.com
shop.azcardinals.com
www.jetsshop.com
nflshop.com
m.nflshop.com
shop.houstontexans.com
shop.giants.com
shop.atlantafalcons.com
shop.miamidolphins.com
jetsshop.com
shop.baltimoreravens.com
shop.detroitlions.com

Other certificates including the domain name nflshop.com

(limited to 100 certificates)
europe.nflshop.com
secure01.fanaticsretailgroup.com
domains.returnly.com
secure01.fanaticsretailgroup.com
www.nflshop.com
r.europe.nflshop.com
secure01.fanaticsretailgroup.com
nflshop.com
domains.returnly.com
secure01.fanaticsretailgroup.com
domains.returnly.com
insidenfl.nflshop.com
m.nflshop.com
nflshop.com
r.europe.nflshop.com
europe.nflshop.com
returns.nflshop.com
www.nflshop.com
www.nflshop.com
www.nflshop.com
returns.nflshop.com
domains.returnly.com
returns.nflshop.com
domains.returnly.com
insidenfl.nflshop.com
www.nflshop.com
secure04.dv.fanaticsretailgroup.com
domains.returnly.com
www.nflshop.com
secure04.dv.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
returns.nflshop.com
www.nflshop.com
nflshop.com
strack.europe.nflshop.com
europe.nflshop.com
m.europe.nflshop.com
secure01.fanaticsretailgroup.com
r.europe.nflshop.com
secure04.dv.fanaticsretailgroup.com
returns.nflshop.com
r.europe.nflshop.com
www.nflshop.com
m.europe.nflshop.com
europe.nflshop.com
secure01.fanaticsretailgroup.com
secure04.dv.fanaticsretailgroup.com
www.nflshop.com
m.nflshop.com
returns.nflshop.com
europe2.nflshop.com
strack.europe.nflshop.com
www.nflshop.com
www.nflshop.com
nflshop.com
m.nflshop.com
secure04.dv.fanaticsretailgroup.com
strack.europe.nflshop.com
nflshop.com
www.nflshop.com
insidenfl.nflshop.com
secure01.fanaticsretailgroup.com
nflshop.com
r.europe.nflshop.com
nflshop.com
www.nflshop.com
secure04.dv.fanaticsretailgroup.com
returns.nflshop.com
strack.europe.nflshop.com
secure04.dv.fanaticsretailgroup.com
returns.nflshop.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
europe.nflshop.com
domains.returnly.com
domains.returnly.com
secure01.fanaticsretailgroup.com
m.europe.nflshop.com
domains.returnly.com
europe.nflshop.com
r.europe.nflshop.com
domains.returnly.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
domains.returnly.com
nflshop.com
nflshop.com
www.nflshop.com
europe2.nflshop.com
secure01.fanaticsretailgroup.com
secure04.dv.fanaticsretailgroup.com
strack.europe.nflshop.com
www.nflshop.com
r.europe.nflshop.com
nflshop.com
www.nflshop.com
m.europe.nflshop.com
europe.nflshop.com
domains.returnly.com
www.nflshop.com

Certificate

The complete raw certificate details for www.nflshop.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QkiEYF6XiTYbHMvaCJo
rh5Q9lv+MtG/alptKZVm4c+2TaeWWFLmKIxCb1/BlWM5+xTRp79tBVVSwZt+LYXQ
Y7hpCanswe0Igol5TC5KlSL5LHcwcGKHy6lztXV24JV7lvkfZAw2l+qagN7acwDY
9GQ6qTf1O4X+7TGkLzSXOJh2CYYvJcI+hZJZn7oWCUJboqIrhysaTxkheJi7KlDJ
pbtF4CF2xoeYIsHPWc8y/TVu+0wo4IJyXN071+OpOf5eBS7GTpNM8oa2WGulZCG1
VDY1XcaZ1iZjfjdg9l4JKIZcb80H7cEclPyodEcHuOcx4pgYJpSy/ly1rSykx9Zy
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17067016087492490990836451354164609579
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NFL Enterprises LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NFL Digital Media'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nflshop.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27398215867048619650635662998027651259980510210850451641027707441964276456962278776528749649386813646505456863122275941988316373118097663111694375665056886466830553217251378316479683047737322932149398814513609492571814383340908203598638100067044485804059134804004647266338861455599221252810578722569588028979382645457239307859961754544254566769574482928477857124600145681426219034355967269237602884161179296126612047316829989765391781639639676083963601356337461796165936164899819086037164439972564641470617047042511761201306054662931964834153993852638648467418110241284705475928149161937158182785632516945124099781153
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f3d19e1cd67d2e5c41ae88d949de7624f6a67120
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nflshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.azcardinals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jetsshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nflshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.nflshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.houstontexans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.giants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.atlantafalcons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.miamidolphins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jetsshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.baltimoreravens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.detroitlions.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016109ec44c20000040300463044022055ab8c021d7b34086f025b90a3543fb0352e59d0eaee7ed2464250cb8cc19ad60220038ca571191b1c5cea4b8269a24e63abbee5f50ee9e5246678d15044d00dc31c0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016109ec45a2000004030047304502203612c00aa39769c30dbd0b014dc5ce1e8fc27cf5995faa247dc0919d82a19ded022100dfa536fca9dc6d92560030a9fcb5d3c360ed30bb3abc9e105f81f18bc52f4cc7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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