bscw.ercim.eu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c9:3c:2d:04:77:48:91:10:e3:5c:7e:c6:5b:0e:28:4a:0c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bscw.ercim.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c9:3c:2d:04:77:48:91:10:e3:5c:7e:c6:5b:0e:28:4a:0c
Serial Number (int): 329813600970075348164134565346173612739084
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 99:af:4f:28:24:6d:17:2c:60:d8:c3:fa:49:42:7a:05:b1:f7:eb:2b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ca:b9:26:ea:73:86:5b:e6:74:a1:8f:67:28:7a:52:60:ba:d2:20:5a
Fingerprint (sha256): 1f:08:09:e8:1f:44:5e:28:9d:84:44:83:10:b5:cd:6f:68:95:ae:e7:b7:aa:2d:0d:7c:f3:bf:17:c9:dc:2d:b0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bscw.ercim.eu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bscw.ercim.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bscw.ercim.eu

Other certificates including the domain name ercim.eu

(limited to 100 certificates)
eficst.ercim.eu
bscw.ercim.eu
bscw.ercim.eu
webmail.sophia.ercim.eu
webmail.sophia.ercim.eu
ercim-news.ercim.eu
www.ercim.eu
wiki.ercim.eu
strews.ercim.eu
paasage.ercim.eu
ercim-news.ercim.eu
paasage.ercim.eu
strews.ercim.eu
fellowship.ercim.eu
www.ercim.eu
openmediaweb.ercim.eu
paasage.ercim.eu
wiki.ercim.eu
paasage.ercim.eu
trac.ercim.eu
webmail.sophia.ercim.eu
svn.ercim.eu
bscw.ercim.eu
trac.ercim.eu
webmail.sophia.ercim.eu
gitlab.ercim.eu
eficst.ercim.eu
strews.ercim.eu
ercim.eu
easyts-egi-old.ercim.eu
svn.ercim.eu
ercim-news.ercim.eu
svn.ercim.eu
lists.ercim.eu
eficst.ercim.eu
bscw.ercim.eu
ercim-news.ercim.eu
trac.ercim.eu
trac.ercim.eu
wiki.ercim.eu
fellowship.ercim.eu
easyts-egi-test.ercim.eu
webmail.sophia.ercim.eu
fellowship.ercim.eu
ercim-news.ercim.eu
fellowship.ercim.eu
bscw.ercim.eu
stats.ercim.eu
www.ercim.eu
bscw.ercim.eu
svn.ercim.eu
eficst.ercim.eu
lists.ercim.eu
bscw.ercim.eu
paasage.ercim.eu
wiki.ercim.eu
strews.ercim.eu
vre4eic.ercim.eu
stats.ercim.eu
stats.ercim.eu
easyts-test.ercim.eu
easyts-egi-old.ercim.eu
trac.ercim.eu
bscw.ercim.eu
www.ercim.eu
ercim.eu
stats.ercim.eu
lists.ercim.eu
wiki.ercim.eu
trac.ercim.eu
svn.ercim.eu
trac.ercim.eu
paasage.ercim.eu
strews.ercim.eu
fellowship.ercim.eu
lists.ercim.eu
paasage.ercim.eu
fellowship.ercim.eu
paasage.ercim.eu
strews.ercim.eu
svn.ercim.eu
lists.ercim.eu
www.ercim.eu
ercim-news.ercim.eu
eficst.ercim.eu
strews.ercim.eu
strews.ercim.eu
ercim.eu
lists.ercim.eu
webmail.sophia.ercim.eu
*.ercim.eu
lists.ercim.eu
wiki.ercim.eu
easyts-egi.ercim.eu
lists.ercim.eu
wiki.ercim.eu
stats.ercim.eu
trac.ercim.eu
www.ercim.eu
fellowship.ercim.eu

Certificate

The complete raw certificate details for bscw.ercim.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHBDCCBeygAwIBAgISA8k8LQR3SJEQ41x+xlsOKEoMMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA1MjEwNDAxMTVaFw0x
ODA4MTkwNDAxMTVaMBgxFjAUBgNVBAMTDWJzY3cuZXJjaW0uZXUwggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQCVZESkMC5s5/x+EC2lDlRE1aWTei0+TcSv
O4WM5vQspsp1uwugx41VwAxUgpjsqEVWlxd3oJo4ZR1OSpF7RZc/9FboTK09XUEM
0TzHUCqIVnAk7ddVwKof1Ml3wJORKmGNfVzz37VHmcvUSWSQ/+F8/rXfZEldUoMX
5Isqk19w16gWqP95FY6rakrx3t9ZYfIYG0I1LKLMlvR0GVXYRB6L8YYIv4rjEERz
D4gck8toZ9ITqFMlYFUTG5vH905z6JjQLDY0wh+hploQxm5ZUBEI314fN6QMfRmF
pJZz8x3Uz6hi8AMBANyaXfnkKTduRCs1D5i4AMcVVL4PAsL2tm0HTyxaqx4kenC3
k7O7Ko+s9P9fiingtTNZ/top9vVF8iXUACtJLzGj5CHSwWJ2IxBSWwzZEkFkpB2W
2he37gB31O4YWRKbANm3aCsj5UVoCL5337lWa3SIl/D++SahGUZ2gmmyVlqhaBFp
5wdPTK73RnOv8OCCKZU/SApIh0VqpjIpqwRZZFA4FLD7II8VrVVlhEoUXJGFkdwb
rxruairSxM859cszMIbhogirxmGZi3+3+qKLOiwC8yUX8gkQh9YzqyhJjJNgiaPd
lOqumgfmwoZlZKnTTfhbzoeq8a1bkFkre7AgI/NS+9SZFNJoC9zVoDStE0pxSl+j
Ic8mAWwbsQIDAQABo4IDFDCCAxAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSZr08o
JG0XLGDYw/pJQnoFsffrKzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDWJzY3cuZXJjaW0uZXUwgf4G
A1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUF
BwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4M
gZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJl
bHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENl
cnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9y
Zy9yZXBvc2l0b3J5LzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2ANt0r+7LKeyx
/so+cW0s5bmquzb3hHGDx12dTze2H79kAAABY4ESreUAAAQDAEcwRQIhAIZEVD1s
W0APA8kO65xvH0QIr0T2HGoo2EYjLcClVAQuAiBnzp7wvTvLg6zDt5WO/k+s7tMG
/BKTPQyGpStmnB/RgQB1ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4
AAABY4ESrgYAAAQDAEYwRAIgV0jKzG8J/tQ+i3zrkpDWr0cV3+tQ+ollfAlkhyH8
9vACIHK3Mr30XM58pnm9I25ksfhgM7SZOn00TlX3chMPNHCwMA0GCSqGSIb3DQEB
CwUAA4IBAQBuq9yXxybiIuxk5izf98892ysaGBvmBVjEX5toR+T/Ve/Qoun7rhB3
eGhzAgYToRrIrG+s6rLFBdfr4NNNFRLzGxUkTBlI1STmqShKbVhd8fljD2stkPb+
KisNGTZz2G6u/cP2HFi1N8GYWHVaZQYIGp1J4TNlh3g1Seu2ptip3oUONPVPxZQh
s2/ejoCqdtlrFFZHaZGt17I5gnvCmSpaJB9gJmtf7TY8zFnnrfSIqL0XWxsf27Lv
+/KPuSB1XKcteZSg1On+sUg5PXn2EshISdam7wAr32XN7sNyIMuOOIHmmZtJ7K9C
6WwEY5ooyEYsW+jBvRsAm7zqrukr/HDT
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329813600970075348164134565346173612739084
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-21 04:01:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-19 04:01:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bscw.ercim.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 609464850053139046290924964062898136121827167461696209342944468011814567178675283607936398427361587488888798294921767360843844936316494487620951562770581472882249521017017133553157245886573523586582240393424908295557806742344036314853766556901756928259738665882566378354838691922883890258825711060644038663028424004611911316191424382865111073613523535122176168900047893295414498709788744768001638416103955025799664111481618823688191983994423341452044583705086070080031609117837301924985286871725201868620877234612067273618894006151564554830597347454726863521947358368541386171839813523598458689682270666211672951439096901368402807721983068560981945854305372311824373581166956104740365394375965760145168283451927775248493692284842325469760827446872955819785892194280564625130980947069723509940219998769657529730730412732540007809385071633448142565524425760461902254046101243523652927121624310451334884944256373948130767385261436294684067679138340962298580373667952256505057573397940971183703810258479430419084665635896837148313954816161474701256764304137006540805180111675983151466503536904932041829471909368392349506851088786956398825441940315178854984794672140305990022572281202959391679891696578397627995507343534552671260160826289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							99af4f28246d172c60d8c3fa49427a05b1f7eb2b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bscw.ercim.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001638112ade500000403004730450221008644543d6c5b400f03c90eeb9c6f1f4408af44f61c6a28d846232dc0a554042e022067ce9ef0bd3bcb83acc3b7958efe4faceed306fc12933d0c86a52b669c1fd181007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001638112ae06000004030046304402205748cacc6f09fed43e8b7ceb9290d6af4715dfeb50fa89657c09648721fcf6f0022072b732bdf45cce7ca679bd236e64b1f86033b4993a7d344e55f772130f3470b0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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