stg.portal.postnord.no

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:72:9c:02:ff:20:05:09:f2:53:bf:14:15:cb:7f:a5:e4:20 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stg.portal.postnord.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:72:9c:02:ff:20:05:09:f2:53:bf:14:15:cb:7f:a5:e4:20
Serial Number (int): 300336422750755198301896092150261212374048
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1f:97:c9:9e:e2:30:eb:42:3c:26:1e:7c:06:0e:1d:9d:23:8d:37:da
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1c:99:82:af:39:a2:6f:e0:fb:1c:95:da:47:79:3d:8b:b6:e1:d4:e7
Fingerprint (sha256): 52:5a:c3:88:11:1e:39:28:8d:eb:a5:03:5a:62:7d:0e:78:f9:fb:a6:57:50:8b:87:6b:07:c2:88:15:6d:20:ce

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate stg.portal.postnord.no

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stg.portal.postnord.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stg.portal.postnord.no

Other certificates including the domain name postnord.no

(limited to 100 certificates)
postnord.no
contacts.api.postnord.no
portal.postnord.no
portal.postnord.no
apistatus.postnord.no
apistatus.postnord.no
portal.postnord.no
t.postnord.no
apistatus.postnord.no
t.postnord.no
*.postnord.no
apistatus.postnord.no
stg.logger.api.postnord.no
contacts.api.postnord.no
ac2ada-status.elastic.co
alb-dev.cloud.postnord.no
contacts.api.postnord.no
shop.postnord.no
stg.communicator.api.postnord.no
my.postnord.no
shop.postnord.no
www.postnord.com
apistatus.postnord.no
*.postnord.no
my.postnord.no
apistatus.postnord.no
apistatus.postnord.no
my.postnord.no
contacts.api.postnord.no
*.postnord.no
apistatus.postnord.no
shop.postnord.no
apistatus.postnord.no
apistatus.postnord.no
contacts.api.postnord.no
apistatus.postnord.no
my.postnord.no
contacts.api.postnord.no
postcards.postnord.com
contacts.api.postnord.no
portal.postnord.no
webmail.tollpost.no
*.postnord.no
my.postnord.no
t.postnord.no
woocommerce-dev.cloud.postnord.no
contacts.api.postnord.no
portal.postnord.no
communicator.api.postnord.no
communicator.api.postnord.no
contacts.api.postnord.no
apistatus.postnord.no
apistatus.postnord.no
portal.postnord.no
contacts.api.postnord.no
apistatus.postnord.no
communicator.api.postnord.no
checkout.postnord.no
ac2ada-status.elastic.co
my.postnord.no
woocommerce-dev.cloud.postnord.no
contacts.api.postnord.no
portal.postnord.no
contacts.api.postnord.no
apistatus.postnord.no
*.postnord.no
portal.postnord.no
portal.postnord.no
shop.postnord.no
ac2ada-status.elastic.co
stg.portal.postnord.no
portal.postnord.no
apistatus.postnord.no
t.postnord.no
portal.postnord.no
portal.postnord.no
apistatus.postnord.no
webmail.tollpost.no
my.postnord.no
woocommerce-dev.cloud.postnord.no
t.postnord.no
apistatus.postnord.no
contacts.api.postnord.no
portal.postnord.no
shop.postnord.no
portal.postnord.no
woocommerce-dev.cloud.postnord.no
contacts.api.postnord.no
stg.communicator.api.postnord.no
apistatus.postnord.no
my.postnord.no
my.postnord.no
*.cloud.postnord.no
apistatus.postnord.no
apistatus.postnord.no
www.postnord.com
apistatus.postnord.no
communicator.api.postnord.no
contacts.api.postnord.no
woocommerce-dev.cloud.postnord.no

Certificate

The complete raw certificate details for stg.portal.postnord.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHFzCCBf+gAwIBAgISA3KcAv8gBQnyU78UFct/peQgMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEwMjkxMjUzMThaFw0x
OTAxMjcxMjUzMThaMCExHzAdBgNVBAMTFnN0Zy5wb3J0YWwucG9zdG5vcmQubm8w
ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDljOCynSZKk0KTxsh3R2oz
ifRO+ddkvICHkDWjCnT88h2AG43ZyGlE/441a/Gtcs7IMwrojmGRbZtXWif8yuPt
VmdBpxpeKUVFInNUjkqXzVwxG7ByOXLU4Y3LjK9XNbs3k1Asg8OcI/HLwXT5nY2q
5JFg0z2GrFxcbAYNADDv2BSTTWzBjWleLKNVZkB285ILv9O/7xCiOcUudKclvfdV
DsqyIT/Af9acqZ+6nGE6W6C/NHQfwAcXucbnsyehEm55dT9ZrTzzQRt7TjAHmuQx
E6mpWXw/A5cSM24K1h9/iugvUxpIqUM7ZQUOmsmCVJMaF+fq6qVRKVnGWJ6E24Ji
tSTqxQag8x8TNx7I8sGaZCzLciK8yt/R7Zc+WXKrq1+Ch0KEEJK6+yV9OvmwxOhZ
70sMbhMSpNm5XbcBpQ7vbG9y3thHYnDZ40itrswlDVPO4/TurH3yJ5B4b4xJK68H
Kj2lb1c0dadDvgxZTZeQYTnhbA9NHj/3DUgBiB2dmvZJNiUqc9q1RJLEeL4fgznp
hinNie3XkC7AFbA8/Dihb90ExZR0ahfKDcpW++ZF4FCPwGx9QKA7fdIirggnvuEi
/0v0BxIk+6BdslpH3kguk8x20st/M+q0W81VkI+NkP+BnlfgmaxJWbWwBarcKgX1
liotna+d3JWPcVI51Evq8wIDAQABo4IDHjCCAxowDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud
DgQWBBQfl8me4jDrQjwmHnwGDh2dI4032jAfBgNVHSMEGDAWgBSoSmpjBH3duubR
ObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9v
Y3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9j
ZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCEGA1UdEQQaMBiCFnN0Zy5wb3J0
YWwucG9zdG5vcmQubm8wgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQB
gt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9y
ZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJl
IHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2Nv
cmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRw
czovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzCCAQQGCisGAQQB1nkCBAIE
gfUEgfIA8AB3ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABZsAZ
pWoAAAQDAEgwRgIhAIDVjhXXp3wLGs0MzDueWWpU1rHJgt5G0KI9TbGyEI/9AiEA
rlC/1FgP8nAWBfwMR3jh8mBIFxD0Mfn5j3mic05qLU4AdQB0ftqDMa0zEJEhnM4l
T0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWbAGadRAAAEAwBGMEQCIHaSILETOFUVW531
5B61OGCMXhpsKHSkTx93uFuiBRsXAiB1PTSyYvGJ/MmiQSXKTsHpGnGQzpE7j41d
OsZK1JqbbjANBgkqhkiG9w0BAQsFAAOCAQEAkxNtiTbh30O5OHnP1L+XGrQWTjO/
D+KeEzMTnteKMUtj1hTJGHwv4hdLhA+InGQGj/VureU22bBp7HbE5A7nedKEVRPC
6FGF9a6lfnHSrSdbdl6yLW6t5jMXCQOUatFVz9Wvdxx3AWGyrkuJ3fXopgIP7/71
ZpfRKYRw0Zd86WMTK93hFvyR2eG16dHEVNRuMCHRHgtfG8FG1LPsJuT3bz/LZMfY
g6qsuVctAltmim8ltaIoPRZyysxPq6GCfQUo7hehfpVB/i6E3QS+9DidxQzab1zj
2IuTQw4J4gYZAx3Vn9W5FcpjokYn7SlnxvsdFMeaMoFlHi/kgQmjq0HVdg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300336422750755198301896092150261212374048
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-29 12:53:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-27 12:53:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stg.portal.postnord.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 936483534455015179930870857434971362201441655855872610196516691425077209717607979231167058438395488409517863775860127847835967555960348666746473427142897811758841046220296097221795860221226439543847948158300777787888960696022533271740868305517634157360150681267205514332226061569892725770634139267575271807909717978891476370240800593179231902574402966729210085628513774744797518035426577905867910921328216176761599100232292897898563859669377211157429571587731012944340814320980763674752583207500908809308040974098634193289748684430641176449528004405709284118310374904650035033492014061886599372256092407293452338335609608658408595929395539933567805945941678192158172684249134534389185626513737362512806033391320068778941060300347907820875283461263245794411954527826784869639827008996742055821613023587957984991677036039035375670513488945444393892853690479319216798132107768337436930983544705911706619277257593820470470752085762737755553137553303813239134818498222861466026689507248178787337172027123099569834860152940461695186335757829533013363530741827561468289637696206049061789394499406701609255614136823913506518396241455338417209590407356457614642390899313065352796627715289406650729761539608952656477476077461427157972990814963
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f97c99ee230eb423c261e7c060e1d9d238d37da
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.portal.postnord.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166c019a56a000004030048304602210080d58e15d7a77c0b1acd0ccc3b9e596a54d6b1c982de46d0a23d4db1b2108ffd022100ae50bfd4580ff2701605fc0c4778e1f260481710f431f9f98f79a2734e6a2d4e007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000166c019a75100000403004630440220769220b1133855155b9df5e41eb538608c5e1a6c2874a44f1f77b85ba2051b170220753d34b262f189fcc9a24125ca4ec1e91a7190ce913b8f8d5d3ac64ad49a9b6e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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