acaw.idrc.ocadu.ca

Issued by R3

About this certificate

This digital certificate with serial number 03:3c:3f:b9:74:a3:6c:d7:d8:f8:9c:35:98:46:d8:c9:7a:db was issued on by Let's Encrypt.

With 40 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=acaw.idrc.ocadu.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:3c:3f:b9:74:a3:6c:d7:d8:f8:9c:35:98:46:d8:c9:7a:db
Serial Number (int): 281838504114897716228926380458843367373531
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 08:8b:f2:f6:d0:25:98:22:2e:45:93:65:44:d2:72:eb:de:44:42:e0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 92:17:7b:90:c1:80:52:c2:3a:5f:c9:86:ae:9b:bd:c6:c9:5b:3b:93
Fingerprint (sha256): 1d:1b:a4:a9:c3:4c:67:b3:e0:4b:c0:20:ab:2c:be:31:f7:91:62:12:20:18:dc:89:8a:d1:c1:71:41:3e:29:4b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate acaw.idrc.ocadu.ca

40

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acaw.idrc.ocadu.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acaw.idrc.ocadu.ca
achecker.ca
cama.idrc.ocadu.ca
codelearncreate.ca
codelearncreate.com
fluidengage.ca
fluidinfusion.ca
fluidinfusion.org
in-kind.ca
includenet.ca
inclusivelearning.ca
issues.fluidproject.org
prototype.codelearncreate.ca
prototype.codelearncreate.com
resources.codelearncreate.ca
resources.codelearncreate.com
sojustrepairit.ca
unpopular.ca
webpourtous.ca
wiki.fluidproject.org
www.achecker.ca
www.barrierfree.ca
www.bigidea.one
www.codelearncreate.ca
www.codelearncreate.com
www.codelearncreate.org
www.floeproject.org
www.fluidengage.ca
www.fluidinfusion.ca
www.fluidinfusion.org
www.fluidproject.org
www.in-kind.ca
www.includenet.ca
www.inclusivedesign.ca
www.inclusivelearning.ca
www.sojustrepairit.ca
www.sojustrepairit.org
www.unpopular.ca
www.web4all.ca
www.webpourtous.ca

Other certificates including the domain name ocadu.ca

(limited to 100 certificates)
webco-its.ocadu.ca
idrc.ocadu.ca
designjam.ocadu.ca
snow.idrc.ocadu.ca
5745189578604544-fe1.pantheonsite.io
ocad.ca
www2.ocadu.ca
wlan-login.its.ocadu.ca
designjam.ocadu.ca
snow.idrc.ocadu.ca
eportfolio.ocadu.ca
slab.ocadu.ca
www2.ocadu.ca
idrc.ocadu.ca
adfs.ocadu.ca
apply.ocadu.ca
courses.idrc.ocadu.ca
www1.ocadu.ca
snow.idrc.ocadu.ca
acaw.idrc.ocadu.ca
www2.ocadu.ca
adod.idrc.ocad.ca
www1.ocadu.ca
eportfolio.ocadu.ca
idrc.ocadu.ca
continuingstudies.ocadu.ca
5745189578604544-fe1.pantheonsite.io
achecker.ca
admissions.ocadu.ca
*.ocadu.ca
apply.ocadu.ca
opendoors.idrc.ocadu.ca
5745189578604544-fe1.pantheonsite.io
www2.ocadu.ca
continuingstudies-staff.ocadu.ca
snow.idrc.ocadu.ca
wireless-login.ocadu.ca
ocad.ca
snow.idrc.ocadu.ca
idrc.ocadu.ca
eportfolio.ocadu.ca
clown.idrc.ocadu.ca
achecker.ca
idrc.ocadu.ca
www2.ocadu.ca
infodrive.ocadu.ca
webco-its.ocadu.ca
webco-its.ocadu.ca
idrc.ocadu.ca
5745189578604544-fe1.pantheonsite.io
5745189578604544-fe1.pantheonsite.io
csa-its.ocadu.ca
snow.idrc.ocadu.ca
cnice.idrc.ocad.ca
snow.idrc.ocadu.ca
adfs.ocadu.ca
snow.idrc.ocadu.ca
5745189578604544-fe1.pantheonsite.io
infodrive.ocadu.ca
webco-its.ocadu.ca
achecker.ca
*.ocadu.ca
clown.idrc.ocadu.ca
5768714657988608-fe2.pantheonsite.io
snow.idrc.ocadu.ca
ocad.ca
*.ocadu.ca
*.ocadu.ca
ocad.ca
5745189578604544-fe1.pantheonsite.io
openresearch.ocadu.ca
*.ocadu.ca
snow.idrc.ocadu.ca
webco-its.ocadu.ca
legacy.idrc.ocadu.ca
hybrid.ocadu.ca
5745189578604544-fe1.pantheonsite.io
slab.ocadu.ca
infodrive.ocadu.ca
idrc.ocadu.ca
5745189578604544-fe1.pantheonsite.io
*.ocadu.ca
slab.ocadu.ca
wlan-login.its.ocadu.ca
adfs.ocadu.ca
adod.idrc.ocad.ca
continuingstudies.ocadu.ca
www1.ocadu.ca
*.ocadu.ca
adfs.ocadu.ca
5745189578604544-fe1.pantheonsite.io
5745189578604544-fe1.pantheonsite.io
idrc.ocadu.ca
vpn.ocadu.ca
5745189578604544-fe1.pantheonsite.io
continuingstudies-staff.ocadu.ca
www2.ocadu.ca
5768714657988608-fe2.pantheonsite.io
www2.ocadu.ca
continuingstudies.ocadu.ca

Certificate

The complete raw certificate details for acaw.idrc.ocadu.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281838504114897716228926380458843367373531
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-22 21:37:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-20 21:37:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acaw.idrc.ocadu.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 670760853350269572205463100582348793645806916717045228637837178038651443198673166138166774464366676133715743971233016669263860695724740468326087547169978501565942914879556250757948389445509731222568382058061934835083612008786670604254098717964417803199833466966814123009486379504931557726961599018226909533710894699803158749374531339614845834876257398213530828853926208493906417242271845829235941655279113764209548587000818963223619935116576807962367657908590278551632665212222620632184095329053005189992698178508356186751988018719384021332905945503783337788490434091648598353912476566783158961601490457803242304786549012661635636482698499577564420707190656699370430745105777297078862957687098992417907514830008172377166176913255473644907627264864963573639915911049758454112481185587125174419023956249225337007809788830076160222893355187128625251350451560070956929387394647088943006829621612506779703436824887896921107105663768383980880821098453399285093645621714800028361171732183975835749189994580737179090326334417751164045115522636411898061004408740467649819169357992069012255600414100615781084013142404302985452213206468047754491733598822154461748050905743986571192842150105491984168196312853424740396186531764750623950934191499
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							088bf2f6d02598222e45936544d272ebde4442e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (841 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acaw.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'achecker.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cama.idrc.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codelearncreate.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codelearncreate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fluidengage.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fluidinfusion.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fluidinfusion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in-kind.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'includenet.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inclusivelearning.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'issues.fluidproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prototype.codelearncreate.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prototype.codelearncreate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.codelearncreate.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.codelearncreate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sojustrepairit.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unpopular.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webpourtous.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.fluidproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.achecker.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barrierfree.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigidea.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codelearncreate.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codelearncreate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codelearncreate.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.floeproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fluidengage.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fluidinfusion.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fluidinfusion.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fluidproject.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.in-kind.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.includenet.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inclusivedesign.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inclusivelearning.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sojustrepairit.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sojustrepairit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unpopular.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.web4all.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webpourtous.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018fa273ecb2000004030047304502205fc6c5953c587128a9243ba1ccc34538caad08bd65e46a98e25517738a8189d2022100dfdcc44f06946ba5ae3fbaf3294245f34bed02ad7c319ba1e48244ca050cfd340076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018fa273f4130000040300473045022100fef624a646909a3394d4a9fa6420f42413770bb48601d41acdc4f530a651444f02204d2b86d33c3b3cc1002dd06b96eaaaf2f7c50f5d34840cfbdf84631cbaf830a2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0043710cc8573a20ae799678b5d0a1c9a05b86ac46e574142dbb5f2d783ffcafbffc69774f017135b39c96235e382b9d0756de7c1f63f7aa766971e623c155963fbe5147f4a88992cf0fb97f3078fd19a931ed1f68c155f2e5d6f93c84e580d57ad3e7dd5fc5aa9eb75086c0acf7ca81e40d035f47b9a212d3df5bf1805d377f83b83f576ba914bf3891a4c168d64b0b7b67b26487eeec5b72899b8aee0610026afbec2086658614355a679d7c656c58302b743fbb4ed54bc191769d6ff68a86c9db0cf394353bb31f1dca8d20d4075ce8f0eec0bc8abce20b4ad58d3b5ef1685f304e053a7a3b21f4dde4185d5bd19a6d6dbd6afa9a806fdcd6d8816b27a7ac9c