fusionrfq-test.havering.gov.uk

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 78:30:5c:d6:67:d4:a4:e6:22:cf:8d:a8:d3:0c:f5:ed was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fusionrfq-test.havering.gov.uk

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 78:30:5c:d6:67:d4:a4:e6:22:cf:8d:a8:d3:0c:f5:ed
Serial Number (int): 159758472712043917479593109535373194733
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 15:a7:1f:98:a7:5c:41:f8:3a:f9:94:44:c4:e5:25:a5:c5:10:b7:cf
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 07:3d:fe:ad:b6:8e:99:42:81:07:1c:6e:79:d2:8c:d4:28:69:bc:13
Fingerprint (sha256): 41:6d:90:42:f6:63:12:29:7d:b5:8c:8e:2f:8d:e9:71:b3:55:d2:dc:d5:b0:ff:17:54:7c:17:ad:f6:4a:1b:f8

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate fusionrfq-test.havering.gov.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fusionrfq-test.havering.gov.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fusionrfq-test.havering.gov.uk
www.fusionrfq-test.havering.gov.uk

Other certificates including the domain name havering.gov.uk

(limited to 100 certificates)
havering.gov.uk
havering.gov.uk
consultation.havering.gov.uk
access.havering.gov.uk
csg.havering.gov.uk
chipside.havering.gov.uk
dwp-cis.havering.gov.uk
www.havering.gov.uk
isupplier-test.havering.gov.uk
havering.gov.uk
parking.havering.gov.uk
access.havering.gov.uk
consultation.havering.gov.uk
webmail.havering.gov.uk
fusionrfq-test.havering.gov.uk
xvault.havering.gov.uk
online.havering.gov.uk
consultation.havering.gov.uk
familyserviceshub.havering.gov.uk
isupplier.havering.gov.uk
propertylicensing.havering.gov.uk
online.havering.gov.uk
fusionrfq.havering.gov.uk
*.havering.gov.uk
www.havering.gov.uk
*.havering.gov.uk
parking.havering.gov.uk
chipside.havering.gov.uk
libraries.havering.gov.uk
www.havering.gov.uk
isupplier-test.havering.gov.uk
www.havering.gov.uk
parking.havering.gov.uk
*.havering.gov.uk
consultation.havering.gov.uk
consultation.havering.gov.uk
jobs.havering.gov.uk
library.havering.gov.uk
www.havering.gov.uk
xvault.havering.gov.uk
consultation.havering.gov.uk
propertylicensing.havering.gov.uk
www.havering.gov.uk
consultation.havering.gov.uk
*.havering.gov.uk
ehc.havering.gov.uk
havering.gov.uk
chipside.havering.gov.uk
havering.gov.uk
access.havering.gov.uk
prepprodforms.havering.gov.uk
isupplier.havering.gov.uk
consultation.havering.gov.uk
payments.havering.gov.uk
llcvp3blade
*.havering.gov.uk
www.havering.gov.uk
familyserviceshub.havering.gov.uk
dwp-cis.havering.gov.uk
*.havering.gov.uk
prepprodforms.havering.gov.uk
isupplier.havering.gov.uk
xvault.havering.gov.uk
familyserviceshub.havering.gov.uk
*.havering.gov.uk
propertylicensing.havering.gov.uk
*.havering.gov.uk

Certificate

The complete raw certificate details for fusionrfq-test.havering.gov.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGaDCCBVCgAwIBAgIQeDBc1mfUpOYiz42o0wz17TANBgkqhkiG9w0BAQsFADCB
jzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQD
Ey5TZWN0aWdvIFJTQSBEb21haW4gVmFsaWRhdGlvbiBTZWN1cmUgU2VydmVyIENB
MB4XDTIzMDkxMjAwMDAwMFoXDTI0MDgxNzIzNTk1OVowKTEnMCUGA1UEAxMeZnVz
aW9ucmZxLXRlc3QuaGF2ZXJpbmcuZ292LnVrMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAyeU32YVemaHfov4wx5d4ZjT+h7D91WP8PtYIUtgMM09Pb70F
YSS2cWlgkjlJMWbVBLw5qRKasa+xETKFy4c73njDKlLrxvjm+COMBXdo0o0awtnL
AmVPJuekjJmP+h9tDJYjb08ImLgZqguVppkN1KIGjW3XECv6yQp2nb0sgU8l8m0C
lx8qJl8Qqi687AKlduqVHqlXpV/h9xnCzKw+BF39aNysLrMeEeubhI+rDJxPXlGc
yDM/Xm4GmjgW0aGbrEsmNlu/TCnor4uXSBYDb0w+KGLMDhGnRO/S+9pRdDkcaaNy
q7eWFWiWuMMnEcOswHu/Ea6DHMJS8kWe2eAQawIDAQABo4IDIzCCAx8wHwYDVR0j
BBgwFoAUjYxexFStiuF36Zv5mwXhuAGNYeEwHQYDVR0OBBYEFBWnH5inXEH4OvmU
RMTlJaXFELfPMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjBJBgNVHSAEQjBAMDQGCysGAQQBsjEBAgIH
MCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgGBmeBDAEC
ATCBhAYIKwYBBQUHAQEEeDB2ME8GCCsGAQUFBzAChkNodHRwOi8vY3J0LnNlY3Rp
Z28uY29tL1NlY3RpZ29SU0FEb21haW5WYWxpZGF0aW9uU2VjdXJlU2VydmVyQ0Eu
Y3J0MCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTBNBgNVHREE
RjBEgh5mdXNpb25yZnEtdGVzdC5oYXZlcmluZy5nb3YudWuCInd3dy5mdXNpb25y
ZnEtdGVzdC5oYXZlcmluZy5nb3YudWswggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkB
ZwB1AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABioolMnQAAAQD
AEYwRAIgUJp5nGZriLXEd3BpQbnJ3bvbV8yy9SLMAuOvNItMdKUCIC/3PZI4SF0L
YHrgaT4nMsLz0WuFWXNgWPr6rNQ964OhAHYA2ra/az+1tiKfm8K7XGvocJFxbLtR
hIU0vaQ9MEjX+6sAAAGKiiUy1gAABAMARzBFAiACdGxUy8U88Sl8H/YAe3pqiCW7
jlAlWrhFSQfZ7ILp5gIhAPRExFBaQPd014z8hbYOu6EikKUkzNACGLEpbCQb/aZX
AHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGKiiUyzwAABAMA
RzBFAiAE47YD9+ACIg9x4ADYIRgCUSW13tbD6mENm6HUFX41ogIhAKSnLmBGBA0d
zNAKVreMOnejwYbzeI39qIRqg7BvVGsFMA0GCSqGSIb3DQEBCwUAA4IBAQBGMCa+
Ev7Xoy3OUaBvv7XHlmX9NM/ohC7L5vRG+I1HKxZ2iZKsltkxk//LBAtxohVlneul
7G8HBP8N63s0NJZV0AxnDUUZ20OSwnBy3bERJsKiruL34SocBM7F4I5vWUDzucHK
qc2cOSRxVOjr07Ky/AkOZOUhFjFBboFGPrNN50cwBjx0U7vd6O63q43CmElK0RDR
SM3csNZ1LjY5UzCAe0KvO1zcYKeoQhrVsTahlSm1MpqBPlcCLKb/s012ngZZG/w1
6Asw/vDiO4z9LUozUdh54Q7HgEP4nLjzgaE+X1iUCbGy9XQgpVXZkPK6o6TbE0zn
Jne3ITqQ3zaA4Fn9
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeU32YVemaHfov4wx5d4
ZjT+h7D91WP8PtYIUtgMM09Pb70FYSS2cWlgkjlJMWbVBLw5qRKasa+xETKFy4c7
3njDKlLrxvjm+COMBXdo0o0awtnLAmVPJuekjJmP+h9tDJYjb08ImLgZqguVppkN
1KIGjW3XECv6yQp2nb0sgU8l8m0Clx8qJl8Qqi687AKlduqVHqlXpV/h9xnCzKw+
BF39aNysLrMeEeubhI+rDJxPXlGcyDM/Xm4GmjgW0aGbrEsmNlu/TCnor4uXSBYD
b0w+KGLMDhGnRO/S+9pRdDkcaaNyq7eWFWiWuMMnEcOswHu/Ea6DHMJS8kWe2eAQ
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 159758472712043917479593109535373194733
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fusionrfq-test.havering.gov.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25486930987031142507165164131904561936032430139600371078877836961917029533378952642300602972531537001690273218891352255029042985256184873011965244924160787027277911309343453010426483089423250122021203599262564781224322238956804589471351257411262922789230843004377880796664470358617383401996721594694126753624272733365884068145268788063232166886749019297607943652357312909374104726290417703134337701595464642481274218980436988061019308885179178694791953477511913038912227387227156199580613100872820573933049937686439628399062423643617243387413201288831230689332750594827518707575217495942387913028718752974354499244139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							15a71f98a75c41f83af99444c4e525a5c510b7cf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fusionrfq-test.havering.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fusionrfq-test.havering.gov.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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