listarchives.documentfoundation.org

Issued by R3

About this certificate

This digital certificate with serial number 04:9d:95:8c:1c:3a:86:41:2c:bb:1b:90:4c:e7:5c:3a:43:ae was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=listarchives.documentfoundation.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9d:95:8c:1c:3a:86:41:2c:bb:1b:90:4c:e7:5c:3a:43:ae
Serial Number (int): 402072257799104724801980164099480495997870
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 71:d3:2e:35:ec:ce:e0:7f:0c:bc:fe:7d:33:98:e7:32:ee:a7:49:0b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 04:ef:41:85:4a:7b:db:05:e8:87:5b:57:12:e2:53:20:e3:1e:59:50
Fingerprint (sha256): 1f:30:6b:a4:ab:aa:57:a8:c1:a5:94:09:25:00:5b:80:37:52:1d:76:61:9f:d9:df:c3:e1:cc:df:13:16:c5:c5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate listarchives.documentfoundation.org

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for listarchives.documentfoundation.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

listarchives.documentfoundation.org
listarchives.documentliberation.org
listarchives.libreoffice.org
listarchives.odftoolkit.org
listarchives.tdf.io

Other certificates including the domain name documentfoundation.org

(limited to 100 certificates)
imageboard.documentfoundation.org
bugs.documentfoundation.org
bugs.documentfoundation.org
survey.documentfoundation.org
documentfoundation.org
documentfoundation.org
survey.documentfoundation.org
irc.documentfoundation.org
planet.documentfoundation.org
listarchives.documentfoundation.org
vm222.documentfoundation.org
infratools.documentfoundation.org
irc.documentfoundation.org
translations.documentfoundation.org
monitoring.documentfoundation.org
infratools.documentfoundation.org
pootle.documentfoundation.org
monitoring.documentfoundation.org
pad.documentfoundation.org
translations.documentfoundation.org
dashboard.documentfoundation.org
imageboard.documentfoundation.org
redmine.documentfoundation.org
listarchives.documentfoundation.org
translations.documentfoundation.org
intranet.documentfoundation.org
documentfoundation.org
stats.documentfoundation.org
blog.documentfoundation.org
status.documentfoundation.org
survey.documentfoundation.org
irc.documentfoundation.org
vm178.documentfoundation.org
auth.documentfoundation.org
stats.documentfoundation.org
translations.documentfoundation.org
bugs.documentfoundation.org
lists.documentfoundation.org
jitsi.documentfoundation.org
wiki.documentfoundation.org
translations.documentfoundation.org
wiki.documentfoundation.org
dashboard.documentfoundation.org
irc.documentfoundation.org
downloadarchive.documentfoundation.org
survey.documentfoundation.org
auth.documentfoundation.org
nextcloud.documentfoundation.org
blog.documentfoundation.org
download.documentfoundation.org
bugs.documentfoundation.org
redmine.documentfoundation.org
elections.documentfoundation.org
wiki.documentfoundation.org
download.documentfoundation.org
pumbaa.documentfoundation.org
planet.documentfoundation.org
monitoring.documentfoundation.org
listarchives.documentfoundation.org
stats.documentfoundation.org
imageboard.documentfoundation.org
translations.documentfoundation.org
planet.documentfoundation.org
pad.documentfoundation.org
blog.documentfoundation.org
listarchives.documentfoundation.org
bugs.documentfoundation.org
nextcloud.documentfoundation.org
blog.documentfoundation.org
survey.documentfoundation.org
piwik.documentfoundation.org
wiki.documentfoundation.org
vm222.documentfoundation.org
intranet.documentfoundation.org
stats.documentfoundation.org
documentfoundation.org
survey.documentfoundation.org
stats.documentfoundation.org
translations.documentfoundation.org
irc.documentfoundation.org
listarchives.documentfoundation.org
translations.documentfoundation.org
gerrit-stage.documentfoundation.org
extensions.libreoffice.org
download.documentfoundation.org
piwik.documentfoundation.org
imageboard.documentfoundation.org
blog.documentfoundation.org
gerrit-stage.documentfoundation.org
bugs.documentfoundation.org
wiki.documentfoundation.org
piwik.documentfoundation.org
translations.documentfoundation.org
pad.documentfoundation.org
auth.documentfoundation.org
listarchives.documentfoundation.org
vm222.documentfoundation.org
listarchives.documentfoundation.org
bugzilla-test.documentfoundation.org
bugs.documentfoundation.org

Certificate

The complete raw certificate details for listarchives.documentfoundation.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGwzCCBaugAwIBAgISBJ2VjBw6hkEsuxuQTOdcOkOuMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjAzMjAwMjA3MTNaFw0yMjA2MTgwMjA3MTJaMC4xLDAqBgNVBAMT
I2xpc3RhcmNoaXZlcy5kb2N1bWVudGZvdW5kYXRpb24ub3JnMIICIjANBgkqhkiG
9w0BAQEFAAOCAg8AMIICCgKCAgEApMZBtXYfMdSgM3V1cYmCBodNqLSr+m6PwtDG
xB6R0giIWLBFl3L4yawTlbQpm8iL1JU8iljGRnhvmrUTSJ+5pjOcImeHkrfDHugm
yYZ5qmW6VcODUsC0LCWjs//FVahsEFaoenQhxLcxlLd6ikzMFJzPeIUzldXCmo9/
3govMREwmDgyprjQeKR2ND9XPbz6g6p2/axLv8JHlpd/bAAexK4lRdw+u/8u/BCt
RJo4+Bsw7xye0GBTAkAAdsWG4TdRVCTmU6jwFw9Ykbv1gzBG81/orQk5sIpDyCIy
tZq4M7M5A3LaE2jBKDiD/qBWbkTIjreh4nPcjJK2dRMyb47iklzGSilpN18TI84d
HsDEJTTqTwMXE5PoL5IJB15+P+rVp2ZIoo5Telz4NaXK3KiiyqbE4iZF8oPqRbJO
Y93jK4moNuaiPfW63hYmtAW1ER4OaXtqAmxbbqCKOfm4AyqUd7CWDN3306epevD8
/2/JttjNEkeIXbTrpnS6vHuVjJg9NoHdHIOEmQzlpywgQdxA+cbyGZufA5BZrskH
axJuwzFusuR5++b2HM0661mhxNRe0uyOxuD7AGH2E44Tjgm4tKYLbepDEwKnTyOC
SqjtBUBNgpXGlRXSpTFnHjKSLBRgNOlc1exckDm2f2a2ieezJG1HudZKwBH2bTr/
n8I3+k8CAwEAAaOCAtUwggLRMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUcdMuNezO
4H8MvP59M5jnMu6nSQswHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYw
VQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5v
cmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wgaUGA1UdEQSB
nTCBmoIjbGlzdGFyY2hpdmVzLmRvY3VtZW50Zm91bmRhdGlvbi5vcmeCI2xpc3Rh
cmNoaXZlcy5kb2N1bWVudGxpYmVyYXRpb24ub3JnghxsaXN0YXJjaGl2ZXMubGli
cmVvZmZpY2Uub3JnghtsaXN0YXJjaGl2ZXMub2RmdG9vbGtpdC5vcmeCE2xpc3Rh
cmNoaXZlcy50ZGYuaW8wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB
AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggED
BgorBgEEAdZ5AgQCBIH0BIHxAO8AdgBGpVXrdfqRIDC1oolp9PN9ESxBdL79SbiF
q/L8cP5tRwAAAX+lSwxXAAAEAwBHMEUCIDV4be1SPiEfnJcZ4Rli8o5+PNL/YHee
nQ2yRPeYwCsoAiEAuy4tViEV1jong+LYKW+wrAPce9fIwEp1o9fuVFmDWacAdQDf
pV6raIJPH2yt7rhfTj5a6s2iEqRqXo47EsAgRFwqcwAAAX+lSw4fAAAEAwBGMEQC
IFLqBRyo/LDmlFp1cIdZofO8J0w65bFsqbxr3k793RS/AiASp3C8jBLbVXSrnjqu
UU+8e9n/z7og62JNcwR3hfgosDANBgkqhkiG9w0BAQsFAAOCAQEAb0dmbCFlzNyZ
LSBPkvAl9TVI1Md9NqwENcoMjnZALJ6tSEdXm2HmAeXJskIFxNWXVw0mXTETsF1V
39tu5f9AUzOXV7ZVGQtznksQKJMhDXgbYoRdiMiWCXONsz14KujmYr8+IKBdT5oR
bT3EV0qkplvCKIL07ixTuMMcj4khqXn/xuSmEcdkPPHJluwMEluoqpncrvwrLZkB
0hLrLZijXDUSgCEWCgy+FUgsnpI5WN29Jpj8/9MqUOD8C2plwZ70PP71HGtVu6Ik
11fHK6RWzqc6crEtBqa08/nSzR3NRQtbbQ66zhBm38JeDUid4LecncspU3E5sAET
8MAUPU/8sw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 402072257799104724801980164099480495997870
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-20 02:07:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-18 02:07:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'listarchives.documentfoundation.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 672221067267196675423641940660142817436814591131841091733508040067353052615315784920602308573772310453357108176380234262355459482785588238814481156504500050367038851824613875912123877322496664765350863362929814441724425699791285132550076742149644872387748733002852527623333877033506217343731580873485474067192760961394226052855571588321172696451507140005563141083942130680377880095386349567407413049293162933552118904654236472174587659641995781041520398657884372292173856986563474123081428951628197095037926223622887993718427234966025696779174472253656563367136940164494899595494140465748342538976330770209668886175562763663649338266015005910994678787100712043442435731602705839023957317477969381653544974666461040334247599551299790078610525660796508257450756712006643210951687690753432709454535088605138769881603338764307516783615731118346303230966145481031918703141122600718713778625491851291250146465610226529463842526412198983368342627410896425163719757131127216099675093888715014432783447905783965333672840023626682983236209243761356945716845760704700524863856859347535356514724748657209037691899956603239454923662303549308817625888566179318002326292715927699752893306382362959950798150257264828835775251160236515700160731806287
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							71d32e35eccee07f0cbcfe7d3398e732eea7490b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listarchives.documentfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listarchives.documentliberation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listarchives.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listarchives.odftoolkit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listarchives.tdf.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017fa54b0c570000040300473045022035786ded523e211f9c9719e11962f28e7e3cd2ff60779e9d0db244f798c02b28022100bb2e2d562115d63a2783e2d8296fb0ac03dc7bd7c8c04a75a3d7ee54598359a7007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017fa54b0e1f0000040300463044022052ea051ca8fcb0e6945a75708759a1f3bc274c3ae5b16ca9bc6bde4efddd14bf022012a770bc8c12db5574ab9e3aae514fbc7bd9ffcfba20eb624d73047785f828b0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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