assets.espncdn.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3b:4a:78:9d:52:2c:6d:2f:14:cf:5d:80:0f:52:30:9d:cd was issued on by Let's Encrypt.

With 39 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=assets.espncdn.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3b:4a:78:9d:52:2c:6d:2f:14:cf:5d:80:0f:52:30:9d:cd
Serial Number (int): 281512506581775983673284616964375044988365
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 64:fe:bf:07:f1:48:2a:90:3a:91:fb:f1:0b:a8:75:50:6d:9f:72:4a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f8:28:09:e3:78:f6:1e:f1:e6:89:ae:84:69:3c:65:7a:65:66:9a:a8
Fingerprint (sha256): 2a:81:f7:65:02:41:5b:01:40:e5:15:28:30:d1:f3:d4:2b:53:be:96:29:94:17:2c:49:7e:7a:96:5a:30:9b:fc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate assets.espncdn.com

39

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for assets.espncdn.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

a.espncdn.com
a1.espncdn.com
a2.espncdn.com
a3.espncdn.com
a4.espncdn.com
api-app.espn.com
artwork.espncdn.com
assets.espn.com
assets.espn.go.com
assets.espncdn.com
cdn.espn.com
cdn.espni.go.com
cdn.secure.espn.go.com
e.espncdn.com
fantasy.espncdn.com
fcast.espncdn.com
fcast.k2.espncdn.com
fcast.n7.espncdn.com
fcast.us-east-1.espncdn.com
fcast.us-west-2.espncdn.com
g.espncdn.com
g.secure.espncdn.com
g1.espncdn.com
g2.espncdn.com
g3.espncdn.com
g4.espncdn.com
i.espncdn.com
i.imgci.com
insights.ibmwatsonfantasyfootball.com
p.imgci.com
s.espncdn.com
s.secure.espncdn.com
secure.espn.com
secure.espncdn.com
shortstop-prod.espncdn.com
shortstop.espncdn.com
site.api.espn.com
sportscenter.api.espn.com
watsonfantasyfootball.espn.com

Other certificates including the domain name espncdn.com

(limited to 100 certificates)
espnqa.com
assets.espncdn.com
cdn.secure.espn.go.com
www.espnqa.com
espnqa.com
espnqa.com
assets.espncdn.com
cdn.espnqa.com
cdn.espnqa.com
www.espnqa.com
artwork.espnsb.net
assets.espncdn.com
www.espn.com
espnqa.com
cdn.secure.espn.go.com
cdn.espnqa.com
espnqa.com
espn.com
espnqa.com
assets.espncdn.com
assets.espncdn.com
espnqa.com
www.espnqa.com
cdn.espnqa.com
www.espnsb.com
www.espn.com
espnsb.com
www.espn.com
assets.espncdn.com
assets.espncdn.com
espnqa.com
espnsb.com
assets.espncdn.com
espn.com
cdn.secure.espn.go.com
assets.espncdn.com
a.espncdn.com
assets.espncdn.com
espnsb.com
www.espnqa.com
www.espn.com
cdn.espnqa.com
www.espn.com
www.espnqa.com
espn.com
www.espnsb.com
www.espnqa.com
espn.com
www.espn.com
cdn.secure.espn.go.com
www.espn.com
espnqa.com
cdn.espnqa.com
espnqa.com
www.espnsb.com
assets.espncdn.com
a.espncdn.com
www.espn.com
espnqa.com
www.espnqa.com
assets.espncdn.com
www.espn.com
www.espnqa.com
espnsb.com
espnqa.com
espn.com
www.espnqa.com
assets.espncdn.com
assets.espncdn.com
www.espn.com
abcfeqa.com
artwork.qa.espncdn.com
espnsb.com
cdn.secure.espn.go.com
assets.espncdn.com
assets.espncdn.com
espnqa.com
espnqa.com
cdn.espnqa.com
espnsb.com
media.video-cdn.espn.com
www.espnqa.com
a.espncdn.com
cdn.secure.espn.go.com
assets.espncdn.com
www.espnsb.com
cdn.secure.espn.go.com
media.video-cdn.espn.com
cdn.espnqa.com
cdn.espnqa.com
assets.espncdn.com
cdn.espnqa.com
espn.com
espnqa.com
www.espnsb.com
assets.espncdn.com
www.espn.com
assets.espncdn.com
a.espncdn.com
watch.video.api.qa.espn.com

Certificate

The complete raw certificate details for assets.espncdn.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AqZrA6JDMi6N15ip2fS
k3TDjTta+I/RzBU8hw/b6pHV/t7bTdtBhPxICaa3bP7UBatabUcqWIW/YQYie3rk
FNAtBZ0tqSH0ph5md07PA/fC1lcQ+9QPLr7wSFgSbSPTl7pSTycZF1BA0OOesqzM
REANlz2OGxz1dPt38fgI230IMANIZ3v7worXnncYWJ3jd7eomA7g4wiTzoiVSBxW
HsR/epaCvqZgx4MaRQuPc00d2MkYVfY020JkLP9q47USDSsQdGK9+jEQ567bea8d
V+aumTfKtzRH8B3/Tz0itzk5elVGDg+ibAEsQ+2INBpcMoDyZWsAToxam4M7JiO/
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281512506581775983673284616964375044988365
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-30 21:11:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-28 21:11:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'assets.espncdn.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26262794626631183033597478035055711069048716359432291564016183033791226342162591671052158689207547174090776228618617419343228316005007065328381968201497722601746473098815873222124103279171416877340424303131578125362409235150753103021058908248943583367647269846145259905935674478917483645349551751743721505337999811356995783657614303500167683596770481476695894139829682178930712155988103010337712253584814059406430931970193502866238353800767126293511912436139074975134916033611183665156944263927876733295898439859231312269324546699487968437812038365781258462426041817746544247701671810048201087042787894972662910533397
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							64febf07f1482a903a91fbf10ba875506d9f724a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (776 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a1.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a2.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a3.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a4.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-app.espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artwork.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.espn.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.espni.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.secure.espn.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fantasy.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcast.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcast.k2.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcast.n7.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcast.us-east-1.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcast.us-west-2.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g.secure.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g1.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g2.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g3.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g4.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.imgci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.ibmwatsonfantasyfootball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p.imgci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.secure.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shortstop-prod.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shortstop.espncdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.api.espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportscenter.api.espn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watsonfantasyfootball.espn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016ce495a59a0000040300483046022100a6bddd5b8fd758e628e586b32e9a2c672f7839bf5804de7696193561b09fe845022100e325960c7e8d6452e8cf1267cf286115e93fc37b11b2bff4ebc1320713eeeb3500750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016ce495a5ba00000403004630440220352dbb8e2eb5cb1ef2c068a80fd44b8a7b8c77862362730824be4f5991304d6702207b9815911ca40f83f229eec31720ad682971fb1eb20f9b1a26d6bbd60ce15cdb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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