connect.mymeleon.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:b6:d4:9c:57:4e:3a:e2:7f:4a:3c:38:98:43:8f:ef:62:e6 was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=connect.mymeleon.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b6:d4:9c:57:4e:3a:e2:7f:4a:3c:38:98:43:8f:ef:62:e6
Serial Number (int): 410663142610835776677718192324362430800614
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 19:24:61:0c:67:84:57:2f:37:cd:fb:cd:7c:bf:90:89:d3:c8:7f:75
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0c:ee:ef:cc:79:c1:56:5e:86:49:03:b3:f0:ac:ef:0c:c9:65:d7:fc
Fingerprint (sha256): 58:1a:fd:9c:96:d9:32:7f:64:a5:40:8b:03:2b:77:89:93:f6:aa:af:b6:63:bd:c2:15:e5:6b:1f:4a:0a:2f:b7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate connect.mymeleon.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for connect.mymeleon.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

actions.porsche-informatik.com
connect.locster.fr
connect.mymeleon.com
connect.podmanagement.co.uk
connect.sweet-move.com
connect.van-hout.com
connect.zerotoonesearch.com
intranet.goetheanum.co
intranet.jasonsmithlandscapes.co.uk
social.echios.com
social.ibanklearning.com
virtuaalikortteli.kestavakaupunki.fi

Other certificates including the domain name mymeleon.com

(limited to 100 certificates)
hr.lewenet.com
www.mymeleon.com
www.mymeleon.com
www.mymeleon.com
connect.z.geriavi.pt
myhr.ollyandseb.com
www.mymeleon.com
login.7afilms.com
hr.bubblecitea.com
www.mymeleon.com
hrm.twin-gmbh.de
personnel.theomegagroup.co.uk
mymeleon.com
mymeleon.com
connect.mymeleon.com
connect.thermodata.eu
mymeleon.com
people.refocusit.com
connect.z.geriavi.pt
connect.thermodata.eu
people.refocusit.com
*.mymeleon.com
atletehub.atl10n.com
zoho.tomahawk.sl
mymeleon.com
www.mymeleon.com
connect.premiumbusiness.services
hr.bubblecitea.com
people.dataplan.be
awsvpn.mymeleon.com
internal.mocham.com
www.mymeleon.com
people.refocusit.com
connect.insilico.fr
www.mymeleon.com
www.mymeleon.com
people.refocusit.com
hr.bubblecitea.com
hr.amlltd.co.uk
zoho.pro2col.com
staff.calipology.co.uk
zc.middelkoopculemborg.nl
connect.elyone.com
hr.mymeleon.com
research.etownz.ie
people.refocusit.com
hris.bynaric.net
mymeleon.com
connect.mymeleon.com
people.refocusit.com
people.refocusit.com
mymeleon.com
connect.mymeleon.com
connect.parteam.fr
mymeleon.com

Certificate

The complete raw certificate details for connect.mymeleon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGkjCCBXqgAwIBAgISBLbUnFdOOuJ/Sjw4mEOP72LmMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MjMwNjAxMDhaFw0x
OTEyMjIwNjAxMDhaMB8xHTAbBgNVBAMTFGNvbm5lY3QubXltZWxlb24uY29tMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRn+7IaQlZKtw7PyLFgZD5gt
Z3AxE4LQcUG+CQGxW6D9ZtIOhlvK4RMV4/55ObfoG1+QayWhGMrPFFNubZpd0a/u
YLKOgDLZPWUuybN73TSiWtfe3VPaweoT4CFyZuaCd8XYiArBDXZJ1EG0kbtnPOLZ
fYHCw7sc1hwKzLC353ux15VUhhrafP+FOJ7O9RS5r9QYIRZeEOMd1mUJ0HgsLhwH
l8tqJB0hBx1jzoL/NT/QlR//1EElK9K8sc0PtZ3yd+rvholBspqqDAD61Q8cTzAL
DS0M5xHOn+0/ZV8lIoXA7Fw71TJyrvpRz3PwrYkOwXV6uswieqtV0f8iDG9HBQID
AQABo4IDmzCCA5cwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQZJGEMZ4RXLzfN+818
v5CJ08h/dTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEF
BQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5j
cnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5j
cnlwdC5vcmcvMIIBTwYDVR0RBIIBRjCCAUKCHmFjdGlvbnMucG9yc2NoZS1pbmZv
cm1hdGlrLmNvbYISY29ubmVjdC5sb2NzdGVyLmZyghRjb25uZWN0Lm15bWVsZW9u
LmNvbYIbY29ubmVjdC5wb2RtYW5hZ2VtZW50LmNvLnVrghZjb25uZWN0LnN3ZWV0
LW1vdmUuY29tghRjb25uZWN0LnZhbi1ob3V0LmNvbYIbY29ubmVjdC56ZXJvdG9v
bmVzZWFyY2guY29tghZpbnRyYW5ldC5nb2V0aGVhbnVtLmNvgiNpbnRyYW5ldC5q
YXNvbnNtaXRobGFuZHNjYXBlcy5jby51a4IRc29jaWFsLmVjaGlvcy5jb22CGHNv
Y2lhbC5pYmFua2xlYXJuaW5nLmNvbYIkdmlydHVhYWxpa29ydHRlbGkua2VzdGF2
YWthdXB1bmtpLmZpMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB
MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYK
KwYBBAHWeQIEAgSB9QSB8gDwAHUAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2y
CJo32RMAAAFtXOyJCgAABAMARjBEAiAgZU+NH2XoOyadcOGAJ97xYvP8kO2zYoc0
m4vXLzQ17wIgGj8LPJLXhukIekWwkidsebBvx+Vz2cddYtTgxE7TPpkAdwBj8tvN
6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAW1c7Ih3AAAEAwBIMEYCIQDL
7kYfyLRzF9SU4hFCuJFozmxAC81r0i5rc4N2G421vQIhAPaRZ9rDeWtKC6GcoXFp
H/157g02Ev4SyGx8EqO0ozH5MA0GCSqGSIb3DQEBCwUAA4IBAQACaDhYpLBZkuZC
iUEoC5oDDKvH5hKPY51AIlWsvYC9o6Hcouj75JVTdiCsZwTvSYYt6jbZeCrTMDrp
9NNx89ldojEd1p+4jU+R6Y5mcSrIY2EmfVYw/ZUNB8uTCxJbLgQ/H2LtI2z5eHGW
PwSRNeUCvtkFyE1Oz+D6CV1u2qRMBrXvWUhOes6nA1loAoa21tMvAEBpwDNMdtZY
uzW1B92el82Dz5fSte5g4MMXAR5H8AlfpVItCKT0ysTY9GYDUva68EPbb7J0ZUjq
KwtRlDiAkMPvKl9d7/RLsMbHU9KlEIBsxG07Q3+DMAer3CPhs51x9XGm0CLR2lc5
CVq737Qa
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRn+7IaQlZKtw7PyLFgZ
D5gtZ3AxE4LQcUG+CQGxW6D9ZtIOhlvK4RMV4/55ObfoG1+QayWhGMrPFFNubZpd
0a/uYLKOgDLZPWUuybN73TSiWtfe3VPaweoT4CFyZuaCd8XYiArBDXZJ1EG0kbtn
POLZfYHCw7sc1hwKzLC353ux15VUhhrafP+FOJ7O9RS5r9QYIRZeEOMd1mUJ0Hgs
LhwHl8tqJB0hBx1jzoL/NT/QlR//1EElK9K8sc0PtZ3yd+rvholBspqqDAD61Q8c
TzALDS0M5xHOn+0/ZV8lIoXA7Fw71TJyrvpRz3PwrYkOwXV6uswieqtV0f8iDG9H
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 410663142610835776677718192324362430800614
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-23 06:01:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-22 06:01:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'connect.mymeleon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19832232884743013150186744964055555691623031323661892796154205368503375490714743421708725106958548193704564742406828185126362743078757227778672561149550384157576167832026864092690634488823512960154224759871496753620949544690085584545600231419217363940226883714270262163621705276217156603648129913017321459853013436705586669400782566140446102217938147460304504812202009082730597740238792528717499885888872064779319711121042618764654475773095724489117315870429626290905632697990276522741357277395685351342059322493350968355397825077996415741332107344792454441607498200934192043729720016428697996877492610990793139635973
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1924610c6784572f37cdfbcd7cbf9089d3c87f75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (326 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actions.porsche-informatik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.locster.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.mymeleon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.podmanagement.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.sweet-move.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.van-hout.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.zerotoonesearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.goetheanum.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.jasonsmithlandscapes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social.echios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social.ibanklearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtuaalikortteli.kestavakaupunki.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d5cec890a0000040300463044022020654f8d1f65e83b269d70e18027def162f3fc90edb36287349b8bd72f3435ef02201a3f0b3c92d786e9087a45b092276c79b06fc7e573d9c75d62d4e0c44ed33e9900770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d5cec88770000040300483046022100cbee461fc8b47317d494e21142b89168ce6c400bcd6bd22e6b7383761b8db5bd022100f69167dac3796b4a0ba19ca171691ffd79ee0d3612fe12c86c7c12a3b4a331f9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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