truconnect.truman.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:aa:e8:7b:39:60:61:60:7f:39:dc:e1:23:55:3b:46:30:6a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=truconnect.truman.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:aa:e8:7b:39:60:61:60:7f:39:dc:e1:23:55:3b:46:30:6a
Serial Number (int): 319493880883109366708111242088126198722666
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ad:ff:fd:61:17:02:bd:3e:f6:93:9e:a1:1a:ad:f6:29:07:91:a3:fe
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 01:c4:5f:3a:db:3e:df:42:ae:cb:ce:e7:44:d9:a4:7b:2d:e1:3b:97
Fingerprint (sha256): 1f:44:be:e7:42:5d:bd:be:ea:7e:aa:32:30:55:f9:7d:c2:e9:a0:b3:f9:cd:1f:3e:e6:22:9f:0c:cd:d2:ce:7c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate truconnect.truman.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for truconnect.truman.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

truconnect.truman.edu

Other certificates including the domain name truman.edu

(limited to 100 certificates)
truview.truman.edu
*.truman.edu
cluster2.technolutions.net
*.truman.edu
truview.truman.edu
*.truman.edu
*.truman.edu
cluster2.technolutions.net
connect.truman.edu
connect.truman.edu
cluster2.technolutions.net
*.truman.edu
*.truman.edu
*.truman.edu
*.truman.edu
*.truman.edu
*.truman.edu
truman.edu
admin.archives.lindenwood.edu
*.truman.edu
*.truman.edu
bb-learn.truman.edu
cluster2.technolutions.net
ruby.truman.edu
shale.truman.edu
*.truman.edu
*.ctpprojects.com
connect.truman.edu
barracuda.truman.edu
cluster2.technolutions.net
cluster2.technolutions.net
*.truman.edu
bb-web.truman.edu
truconnect.truman.edu
*.truman.edu
*.truman.edu
truconnect.truman.edu
barracuda.truman.edu
tsu-cms.truman.edu
*.ctpprojects.com
*.truman.edu
*.truman.edu
*.ctpprojects.com
truview.truman.edu
cluster2.technolutions.net
*.truman.edu
*.ctpprojects.com
*.truman.edu
*.truman.edu
*.truman.edu
*.truman.edu
*.truman.edu
admin.archives.lindenwood.edu
*.truman.edu
cluster2.technolutions.net
cluster2.technolutions.net
cluster2.technolutions.net
*.truman.edu
*.truman.edu
*.truman.edu
*.truman.edu
*.truman.edu
cluster2.technolutions.net
*.truman.edu
cluster2.technolutions.net
*.truman.edu
cluster2.technolutions.net
cluster2.technolutions.net
*.truman.edu
webwork.truman.edu
admin.archives.lindenwood.edu
*.truman.edu
*.truman.edu
connect.truman.edu
*.truman.edu
*.truman.edu
cluster2.technolutions.net
*.truman.edu
*.truman.edu
*.truman.edu
*.sites.truman.edu
*.truman.edu
*.truman.edu
*.truman.edu
connect.truman.edu
bb6.truman.edu
*.truman.edu
*.ctpprojects.com
*.truman.edu
connect.truman.edu
*.truman.edu
*.truman.edu
truconnect.truman.edu
secure.truman.edu
*.truman.edu
admin.archives.lindenwood.edu
*.truman.edu
cluster2.technolutions.net
truconnect.truman.edu
cluster2.technolutions.net

Certificate

The complete raw certificate details for truconnect.truman.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHFDCCBfygAwIBAgISA6roezlgYWB/OdzhI1U7RjBqMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA4MjkwNzEyNTdaFw0x
ODExMjcwNzEyNTdaMCAxHjAcBgNVBAMTFXRydWNvbm5lY3QudHJ1bWFuLmVkdTCC
AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANWDUOBUJTRinaXli53zPteS
37G1O9hJ7PIL/UqQYD8HsvZHv3rM4+RMzGtyGe1i6QbeE2q3jWfUxcTe9HdVCkxM
0YAOs/3hHcBoCNLI01KSLY4iZPCcgYYc7m1AbZXvXjEqZqi+1X9spvEqGrhn2J/C
ZiMs2i8LcB9AcpTpw6kkLlqEYJAjCIDB2TuUiw2dApimLZK9g7+KWHSNWKQBwPrC
KmjBgcp6V5QxVMnVSX0q/R6lmq9acjxQzRCdVOOjFBGy4p3geYAQrrhJ+WcU3gMj
0GWIMOCKp1OeiHJ0HnHXbNAQ+9FEqNS06qTbEXs4h9rl8aOdNjyD3H1DLNq0bUBc
aoQFwcU+RszgTGYUq+gY1V+y5/pPYig4iuroQJ8kuBZCIRKNqy2Av/NtjapRGckQ
Wcg4oEMj3NobW0WnAyOi/9Q0fPn5by04Jjt8KAw7bfp1it0OOyZHd7I4cfdLrLQ+
PVwrvoMwdw0c4l9757IoKGbWipUQ/sZWYB/zrakdvCIvHdYo8koV7KJetBUj3kUP
uO1Fgs+dMFUnZJRzwEGx/mWLK2xjhpIfXlqwH6sMKUDOVSj3J0OPLlB6squZqphS
FaXBHc5IpRLMAoanx0LXcN5acyB1ae6rVbV3mbdggcXh0bYkTl61DLe8ik+LxKAC
PsEg08sB26YbTjqCaGQdAgMBAAGjggMcMIIDGDAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O
BBYEFK3//WEXAr0+9pOeoRqt9ikHkaP+MB8GA1UdIwQYMBaAFKhKamMEfd265tE5
t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29j
c3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2Nl
cnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wIAYDVR0RBBkwF4IVdHJ1Y29ubmVj
dC50cnVtYW4uZWR1MIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLf
EwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcw
gasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSBy
ZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3Jk
YW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6
Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wggEDBgorBgEEAdZ5AgQCBIH0
BIHxAO8AdQDBFkrgp3LS1DktyArBB3DU8MSb3pkaSEDB+gdRZPYzYAAAAWWEviFB
AAAEAwBGMEQCIBELElQ9U7dZFH0v2jGNk7o29fsomRFqkY7NSVKkWYz0AiBe7oFw
GUYwQ/K+DAvELOeAfwrFWVEEr73CbDbmWOw7QwB2AKRQEmkFWhVUXmIRqze8ED9i
rlV2pF5LFxRFPhsiEGolAAABZYS+IUUAAAQDAEcwRQIhAOclLjOCNuyDx+ykiurI
9TYnOIvWI+QhqBTeZ5t0zg+/AiAvnYn0TNisJW2rFSpmTs9MoflcFJMgDHRwSi15
gBg9KTANBgkqhkiG9w0BAQsFAAOCAQEAT2XKPYLWKyKV0s6u7JLqvJzxdZ7u8GlA
3s03/n36/63igcF9BsQZZiwoTkK9M9aTh21P8knWRIYO+tFe8pALv1b/wspTg8/R
qh8lLRaZEl52/LpyNLngpiuVPxA7kH4lAOI5qenrLYqWpiMGuKMS0jAyESnC2k4G
T1Y9CfwuwQVTWsAl9DhbMdYMfdw9gEmTHEBjTCEPhYGFnjhn/kMCK+jN+2h0UB/7
0/oua1LV5KAO5Ln+jspvCcJsiyfQmNLBD1/NVINigvQtgSAnXN9jcmJ33RuLo4DJ
MYV6hb53ZIgg8cujLjZ2crq4jU2FD/HVjhxTFQf/ee/US5fi/kGJTw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319493880883109366708111242088126198722666
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-29 07:12:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-27 07:12:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'truconnect.truman.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 871056851434533490875981665075204327465864423118299288814125793271130260236491012568976229840877807224158218878030617102229023034467078423607971508883202445033704023228298008518424949690376762933664740556980447532325809477346467583800810988542777100121763864146957260371745153087232606303086694439940420876472289599978698798797722439503814537088027840192249774776866866493786931669539477209382141701656661620474858966677652487749160567826196674992133598740736703360986285391650527872667427827293328433003709254009608847980202375393551873233107797894769950520543515352669971086885569095118984753527958149884144117099911787127440725069931384023435729084606914715087290280787728679367281720169732686767909672508072919678259846062967211274137771492425754259006664327833168022950544977126365407453260910135486350752005906605383527756169016364121075242667452472090232187018296906250191309265423499162520979373723392456830064381911911342603096977425215399909261278019277047000148740062528093101889644669610116483330980982401395965267182757125701246282580130632901044563465834596795088245060576160524760381289483568262218110618264964408597044316083669818049186203437204484557399019214901711172934449815137180375109132551241720113622430540829
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							adfffd611702bd3ef6939ea11aadf6290791a3fe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truconnect.truman.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f633600000016584be214100000403004630440220110b12543d53b759147d2fda318d93ba36f5fb2899116a918ecd4952a4598cf402205eee817019463043f2be0c0bc42ce7807f0ac5595104afbdc26c36e658ec3b43007600a4501269055a15545e6211ab37bc103f62ae5576a45e4b1714453e1b22106a250000016584be21450000040300473045022100e7252e338236ec83c7eca48aeac8f53627388bd623e421a814de679b74ce0fbf02202f9d89f44cd8ac256dab152a664ecf4ca1f95c1493200c74704a2d7980183d29
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004f65ca3d82d62b2295d2ceaeec92eabc9cf1759eeef06940decd37fe7dfaffade281c17d06c419662c284e42bd33d693876d4ff249d644860efad15ef2900bbf56ffc2ca5383cfd1aa1f252d1699125e76fcba7234b9e0a62b953f103b907e2500e239a9e9eb2d8a96a62306b8a312d230321129c2da4e064f563d09fc2ec105535ac025f4385b31d60c7ddc3d8049931c40634c210f8581859e3867fe43022be8cdfb6874501ffbd3fa2e6b52d5e4a00ee4b9fe8eca6f09c26c8b27d098d2c10f5fcd54836282f42d8120275cdf63726277dd1b8ba380c931857a85be77648820f1cba32e367672bab88d4d850ff1d58e1c531507ff79efd44b97e2fe41894f