api.km.staging.mindworks.xyz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1c:d1:03:f6:e9:12:d5:61:d1:be:ad:90:b1:49:ef:65:ad was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api.km.staging.mindworks.xyz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1c:d1:03:f6:e9:12:d5:61:d1:be:ad:90:b1:49:ef:65:ad
Serial Number (int): 271142593305015392996215504007236074562989
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3a:d8:34:50:e5:68:dd:bd:19:dd:07:eb:e1:12:ab:20:cc:60:37:45
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 31:fc:42:03:ff:86:d6:e6:53:a7:b9:df:a4:3f:90:14:f1:7e:01:ce
Fingerprint (sha256): 17:0a:ae:0d:7c:01:d6:f1:f2:fa:58:db:88:00:fe:f3:d5:51:cd:03:19:65:63:c4:ab:f5:74:11:b1:e5:f2:25

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate api.km.staging.mindworks.xyz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.km.staging.mindworks.xyz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.km.staging.mindworks.xyz

Other certificates including the domain name mindworks.xyz

(limited to 100 certificates)
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
projects.ragingsanity.com
books.solidtechnics.com
books.sidestreetmedia.cc
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
projects.ragingsanity.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
sentry.mindworks.xyz
projects.adrenalineit.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
projects.ragingsanity.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
pm.ed.sa
firebaseapp.com
projects.drsofa.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
sentry.mindworks.xyz
projects.farnell.ca
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
projects.ragingsanity.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
*.mindworks.xyz
projects.ctdcinc.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
mindworks.xyz
firebaseapp.com
api.km.staging.mindworks.xyz
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
projects.ragingsanity.com
firebaseapp.com
firebaseapp.com
pm.xcelagency.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
hr.cybexo.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
um.prod.mindworks.xyz
sentry.mindworks.xyz
firebaseapp.com
firebaseapp.com
books.djltraining.com

Certificate

The complete raw certificate details for api.km.staging.mindworks.xyz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGbzCCBVegAwIBAgISAxzRA/bpEtVh0b6tkLFJ72WtMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMDYwNjIzNDBaFw0y
MDAzMDUwNjIzNDBaMCcxJTAjBgNVBAMTHGFwaS5rbS5zdGFnaW5nLm1pbmR3b3Jr
cy54eXowggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDCpIIdxurQc5SG
kItc+vPQHbeYDHQTixykz45jaPFv5lBKOe0xfD1Q0CzLaiqs4aojNNKMNNuNGEyw
wu3OcuouWelPl8m735tq15Ut6iUmlPY5ryrY+dxZxlpo6hrpo3l2xbMVya4Nbxoh
LFJ6SAQN+Ci8/aTtqXNqY4IEu123FdDPv3lRlOQflb0btnw55w/9ywhQkMKyQc4f
LiQ15ywQDa6Ja2iryBmcy/nKHIH0ZXGpr6UEm2rAriSot71y/XPthTISHXXXS3+S
ITOhWgGgooy/NojvxoO0suprv1QMBJn2Gr3JZgyUqLKZiivC7rfh3+2Dzppfo7bn
L6tW9wyglLBv+k5l+c2BJkHfMxXbhU3nKTiv/um/uS9pGC+LYB5eMFHmpEvh0/xL
XKGX+ZPX+ZneTvcIulIMzAhJcV9sHXzcHqQhZIAMLKPxc+DzE6hbOd5aFZJmj0qh
alYNwFWrMPgcbTtE1WWl74uhiXwrDwO+d+0H6iIgk9UR0d4Q4IvCKNDry8NQkeRN
zwODBHEmDXtiDOkBMYGw0k5rzIylLHznn9pFgF52nsGxEpmF2NwYmqz7/3/pGG6c
ydFfRcLvJFYNywPPPEccv90E33TxrKdJHWc6Fw2CQ+c96VrJitslJRq2OuC7H1Pu
LQ0012ZucCch17wdt05PpG89pbV2/wIDAQABo4ICcDCCAmwwDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAA
MB0GA1UdDgQWBBQ62DRQ5WjdvRndB+vhEqsgzGA3RTAfBgNVHSMEGDAWgBSoSmpj
BH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0
dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0
dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCcGA1UdEQQgMB6CHGFw
aS5rbS5zdGFnaW5nLm1pbmR3b3Jrcy54eXowTAYDVR0gBEUwQzAIBgZngQwBAgEw
NwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5j
cnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQBvU3asMfAxGdiZAKRR
Ff93FRwR2QLBACkGjbIImjfZEwAAAW7aF8RWAAAEAwBGMEQCIE+HDozdS2b7yl3l
7GMkIEZtwgB9jIcbsJ7OMAyK1RtmAiBcgp7xunNae1/9EHjHi01XPrUfejY0MPas
BqQMf8nXzgB2AAe3XBvlfWj/8bDGHSMVx7rmV3xXlLdq7rxhOhpp06IcAAABbtoX
xFMAAAQDAEcwRQIgNPcWBOMhPr0Cz/r5nUx6z+CpK2H5nFcRniImbdnAoywCIQDn
MmNA1JS6qvrC9mJgdElE9MOyCTJe3Tf3E2Evwv+vpjANBgkqhkiG9w0BAQsFAAOC
AQEAflUOqPP74j6oBmbUrZx2Rs8dtPS5opItojZGARVvhrg4O+WFXCHg5iVsCCv7
Ip5XT7KkOx/74+Y5p/bazckBS6Q6L5Xm9LN/AYf5AA+SuKBbCyPN+eA+vcC4yRxX
GRHwSha7hIeX3b3vCF1+kiEMuQus9axjyx1piO8Sn9JrjvVDMi5ftz12Jj85CQ82
ygk3QYB3viF0X/FPnudUxxOM4TDNNyLmkh8m8ukTkkY1Z4BqAw2moUIQufg7Q3pJ
LV1kL0oYB802hVm6ap5XxQ3cSELuB+YWN2DSo0l20aehhtDEFb9Fw1LkhzR2DaLX
G07So8/i/sfKzj0vsCOtROHd6w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwqSCHcbq0HOUhpCLXPrz
0B23mAx0E4scpM+OY2jxb+ZQSjntMXw9UNAsy2oqrOGqIzTSjDTbjRhMsMLtznLq
LlnpT5fJu9+bateVLeolJpT2Oa8q2PncWcZaaOoa6aN5dsWzFcmuDW8aISxSekgE
DfgovP2k7alzamOCBLtdtxXQz795UZTkH5W9G7Z8OecP/csIUJDCskHOHy4kNecs
EA2uiWtoq8gZnMv5yhyB9GVxqa+lBJtqwK4kqLe9cv1z7YUyEh1110t/kiEzoVoB
oKKMvzaI78aDtLLqa79UDASZ9hq9yWYMlKiymYorwu634d/tg86aX6O25y+rVvcM
oJSwb/pOZfnNgSZB3zMV24VN5yk4r/7pv7kvaRgvi2AeXjBR5qRL4dP8S1yhl/mT
1/mZ3k73CLpSDMwISXFfbB183B6kIWSADCyj8XPg8xOoWzneWhWSZo9KoWpWDcBV
qzD4HG07RNVlpe+LoYl8Kw8DvnftB+oiIJPVEdHeEOCLwijQ68vDUJHkTc8DgwRx
Jg17YgzpATGBsNJOa8yMpSx855/aRYBedp7BsRKZhdjcGJqs+/9/6RhunMnRX0XC
7yRWDcsDzzxHHL/dBN908aynSR1nOhcNgkPnPelayYrbJSUatjrgux9T7i0NNNdm
bnAnIde8HbdOT6RvPaW1dv8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271142593305015392996215504007236074562989
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-06 06:23:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-05 06:23:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.km.staging.mindworks.xyz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 794072570973408033503639018091369135953621156375085311804344230419418877622259218990830991537735024170704395476423028531966935783711168439610715754352248100688062955890807835611158416285603526371930611186348450621689375874670450438212780411878678776638649458270371857913827125854361655983503435955165656366074568509982346477728197032837468150824553160774065207240503326428167252618636780965155243286512470882588155975931186054504054977610200592961123040394745318706729786656470894340654904748630699581613970664486173040363706091648497916198832144776749191946425453468467974113526649962916630409815123201179674409678939827486260681084035645889778434711780687453442921744718090274991400383778011225865215352330902538056393198414504869973819484265893045068181281522908694610377661708572174814733033630331295912595611016901382299126558474272280538816247518601454618232370158388581462074462541410294932897982005877138921487687300753857370185038089393635058797636022396119093484601468592636791696203937724350935988879918228544920845115449149392372879925047159987346012672006252072393520187519931827380449124118155128128535670194438876335866412469779985035975289402158208800267856606512047555914628676808725741318706907088113438353704449791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3ad83450e568ddbd19dd07ebe112ab20cc603745
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.km.staging.mindworks.xyz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016eda17c456000004030046304402204f870e8cdd4b66fbca5de5ec632420466dc2007d8c871bb09ece300c8ad51b6602205c829ef1ba735a7b5ffd1078c78b4d573eb51f7a363430f6ac06a40c7fc9d7ce00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016eda17c4530000040300473045022034f71604e3213ebd02cffaf99d4c7acfe0a92b61f99c57119e22266dd9c0a32c022100e7326340d494baaafac2f66260744944f4c3b209325edd37f713612fc2ffafa6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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