arkiv.status.geoikt.no

Issued by R3

About this certificate

This digital certificate with serial number 04:ac:88:6c:12:ba:c3:80:17:fb:c9:e8:3a:08:28:61:fa:2a was issued on by Let's Encrypt.

With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=arkiv.status.geoikt.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ac:88:6c:12:ba:c3:80:17:fb:c9:e8:3a:08:28:61:fa:2a
Serial Number (int): 407159046992810188148357247737487725558314
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c7:16:0d:67:f0:fe:a8:bc:a3:3f:f8:7a:40:a4:09:29:f8:f6:e6:bd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c0:3b:c1:b1:d5:01:53:b2:27:6c:65:15:fa:72:3a:2a:42:a3:69:6a
Fingerprint (sha256): 52:c0:0b:92:35:6d:ee:31:aa:8b:ee:80:ae:03:17:ab:9f:d1:8e:15:48:ca:36:76:eb:4e:12:4f:dc:04:9c:76

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate arkiv.status.geoikt.no

38

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for arkiv.status.geoikt.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arkiv.status.geoikt.no
cu.status.jasper.com
floridablue-status.pager.com
status-page.gurado.io
status.accessmanagement.motion.abb.com
status.advisorsexcel.com
status.anypayx.com
status.basehq.com
status.byggtjeneste.no
status.chasehistory.net
status.cloud.virtana.com
status.coniq.com
status.courier.com
status.digitraffic.fi
status.dmdata.jp
status.efficientlearning.com
status.evolveip.eu
status.gericall.nl
status.herocoders.com
status.iexapis.com
status.inaxus.com
status.koin.network
status.lambdalabs.com
status.livingsecurity.com
status.loopup.com
status.medius.com
status.namirial.com
status.ouraring.com
status.surfly.jp
status.tartu.ee
status.trimessa.nl
status.trueipsolutions.com
status.usemechanic.com
status.wasabi.com
statuspage.sports.gracenote.com
uhg.status.netskope.io
www.cypressstatus.com
www.gitpodstatus.com

Other certificates including the domain name geoikt.no

(limited to 100 certificates)
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
test-nvdb-client.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
demo-georeg-api.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
demo-nvdb-client.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
*.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no

Certificate

The complete raw certificate details for arkiv.status.geoikt.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ni8A57Q/g7XJGfAxftb
v5Uwz3NXmMOqpJalHOOeo6vxYDNlzj+k3HdJHxKFUHKM+PFSZk14ixGMXljPXg+a
fFXGdTFr+GW7QFVE728uIJmOMVuMGTPrOwubAtOYf3hnrJ4N8KHPvYxKHs1aq7bF
i+2OJ69fDmNNDot//KO/fByU+CJCe79NzGZnDx0Gu4j/2Q4K+TN9U0C8lqwJpDDj
zZqpQAopMDM0AMDwIy5tpqH7caCA0RE2AZhrQgXOIgvXN7aJIU3VTBVjVf3vpUYy
fjdTpDMqyH/RDESTJCBcggJv4zxbBrI1e512hcgty3De3p60h2tuWq++cukP7PA/
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 407159046992810188148357247737487725558314
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-28 07:14:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-26 07:14:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'arkiv.status.geoikt.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27074533629239919126407147654920643960052436714696179144787197916198538020384792886114043253228371586943538458631512067082032262515801136247222388815278378003322050031928809283232869380125179924575744734608984467285305364718995812447982747726479963437782474732746729504588097119661884136108319520836502923666094451093315628224665262697252450364290956701878702868966145124381861101026880562306500386635612136686128669595522674376983475494427062736046132932006175237555395329730156918171025592191855094717989741025350893716476321849494482590017771950692815111730196414382441266173280173952422575239894958911507361972019
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c7160d67f0fea8bca33ff87a40a40929f8f6e6bd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (873 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkiv.status.geoikt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cu.status.jasper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floridablue-status.pager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status-page.gurado.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.accessmanagement.motion.abb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.advisorsexcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.anypayx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.basehq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.byggtjeneste.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.chasehistory.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.cloud.virtana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.coniq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.courier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.digitraffic.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.dmdata.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.efficientlearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.evolveip.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.gericall.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.herocoders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.iexapis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.inaxus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.koin.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.lambdalabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.livingsecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.loopup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.medius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.namirial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.ouraring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.surfly.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.tartu.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.trimessa.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.trueipsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.usemechanic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.wasabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statuspage.sports.gracenote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhg.status.netskope.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cypressstatus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gitpodstatus.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c14fe498200000403004730450221008929ba198b683608803212c1571801cfcad8f15febc071ca76bed62e656f0c6002201fdc6ab579bdb11fadb2f9d762286b19fcfa3972cfb3fca96f3968c298b5789b0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c14fe4980000004030047304502210099f7c45041bb2ba2c7da4066a52860f4bc866701077262a61a2ade3441c7ef0c022048e64deaa90e91889f1dc7428602064900587e79675b2d8036430cd3525e455d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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