kkv.fi

Issued by R3

About this certificate

This digital certificate with serial number 03:51:09:71:6e:d7:e0:d5:89:68:18:96:1b:31:f6:15:64:c6 was issued on by Let's Encrypt.

With 40 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kkv.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:51:09:71:6e:d7:e0:d5:89:68:18:96:1b:31:f6:15:64:c6
Serial Number (int): 288912281545552528293317779517629091112134
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d7:7a:f9:6c:c4:ce:6f:52:e5:32:73:46:5b:a8:7a:47:8b:35:6d:51
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 35:16:17:44:30:0d:36:e0:bb:95:c5:f5:9e:ab:93:97:96:9f:dc:52
Fingerprint (sha256): 5d:16:65:e5:68:fa:54:5f:61:75:07:ce:f5:da:4f:ad:de:68:bb:1b:84:92:aa:96:b1:e7:08:c5:ea:b8:0d:af

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kkv.fi

40

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kkv.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arkisto.kkv.fi
ecc.fi
ecc.kkvnetwork.stage.geniem.io
fcca.fi
kilpailuvirasto.fi
kkv.fi
kkv.kkvnetwork.stage.geniem.io
kkvnetwork.stage.geniem.io
konsumentradgivning.fi
kuluttajaneuvonta.fi
kuluttajansuoja-apuri.fi
kuluttajaoikeus.fi
kuluttajavirasto.fi
matkapaketti.fi
matkapakettiapuri.fi
matkapakettivalvonta.fi
reklamaatio-apuri.fi
reklamaatioapuri.fi
static.kkv.fi
vakuusrekisteri.fi
valmismatka.fi
valmismatka.kkv.fi
www.ecc.fi
www.fcca.fi
www.kilpailuvirasto.fi
www.kkv.fi
www.konsumentradgivning.fi
www.kuluttajaneuvonta.fi
www.kuluttajansuoja-apuri.fi
www.kuluttajaoikeus.fi
www.kuluttajavirasto.fi
www.matkapaketti.fi
www.matkapakettiapuri.fi
www.matkapakettivalvonta.fi
www.reklamaatio-apuri.fi
www.reklamaatioapuri.fi
www.vakuusrekisteri.fi
www.valmismatka.fi
www.xn--konsumentrdgivning-eub.fi
xn--konsumentrdgivning-eub.fi

Other certificates including the domain name kkv.fi

(limited to 100 certificates)
lyae.vy-verkko.fi
sip.vy-verkko.fi
matkapakettiapuri.fi
lyae.vy-verkko.fi
kkv-vk2017.focusflow.net
lyae.vy-verkko.fi
kkv-vk2017.focusflow.net
lyae.vy-verkko.fi
lyae.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
matkapakettiapuri.fi
matkapakettiapuri.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
tls.automattic.com
lyae.vy-verkko.fi
kkv-vk2017.focusflow.net
*.kkv.fi
www.kkv.fi
matkapakettiapuri.fi
ucc.vy-verkko.fi
lyae.vy-verkko.fi
sip.vy-verkko.fi
matkapakettiapuri.fi
lyae.vy-verkko.fi
kkv-vk2017.focusflow.net
kkv-vk2017.focusflow.net
lyae.vy-verkko.fi
kkv-vk2017.focusflow.net
securemail.kkv.fi
lyae.vy-verkko.fi
asiointi.kkv.fi
asiointi.kkv.fi
asiointi.kkv.fi
lyae.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
*.kkv.fi
matkapakettiapuri.fi
turvaviesti.kkv.fi
asiointi.kkv.fi
www.kkv.fi
www.kkv.fi
tls.automattic.com
securemail.kkv.fi
lyae.vy-verkko.fi
tls.automattic.com
matkapakettiapuri.fi
lyae.vy-verkko.fi
kkv.fi
securemail.kkv.fi
lyae.vy-verkko.fi
*.kkv.fi
www.kkv.fi
matkapakettiapuri.fi
kkv.fi
matkapakettiapuri.fi
sip.vy-verkko.fi
sip.vy-verkko.fi
lyae.vy-verkko.fi
www.kkv.fi
kkv-vk2017.focusflow.net
asiointi.kkv.fi
kkv-vk2017.focusflow.net
asiointi.kkv.fi
turvaviesti.kkv.fi
securemail.kkv.fi
api.asiointi.kkv.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
lyae.vy-verkko.fi
valma.kkv.fi
securemail.kkv.fi
arkisto.kkv.fi
lyae.vy-verkko.fi
asiointi.kkv.fi
kkv.fi
asiointi.kkv.fi
sip.vy-verkko.fi
kkv-vk2017.focusflow.net
tls.automattic.com
lyae.vy-verkko.fi
matkapakettiapuri.fi
matkapakettiapuri.fi
kkv-vk2017.focusflow.net
ucc.vy-verkko.fi
ucc.vy-verkko.fi
sip.vy-verkko.fi
kkv-vk2017.focusflow.net
lyae.vy-verkko.fi
kkv.fi
testi-tweb.kkv.fi
lyae.vy-verkko.fi
asiointi.kkv.fi
kkv-vk2017.focusflow.net
sip.vy-verkko.fi
ucc.vy-verkko.fi
kkv-vk2017.focusflow.net

Certificate

The complete raw certificate details for kkv.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288912281545552528293317779517629091112134
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-01 16:13:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-30 16:13:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kkv.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 793210885600631933289044770995289443441852860959112340031094843737497708258282643253019427553733906087767046783823623984156561158308425040596670343720401125806940007081629884885432165966467322541262286090273036208890604203784158685769025654690559149773412646479867066949242568345647759396811800080138239755649720997705753912876116984529150245946926929949148088977974871274177984665352097818864657358412266448693520721218270880204396246791456233069698746594466804216473913610982886960084148417540680007734612607299509291874619188473942843652044666573827859124530912837352567672579329007995307822597895245566581104639575585567041357298449100292729651708713273676801008185900247628721864665515602327161941056039513710556798293707932819574622036225779138837555848445734686408674924013267951325372139207938707143051962160537242652395365919421682722871472174355356101731162316674302317283871771463123824060059990718993415980372912780229704794339811931518859416945403606435029600364453856798640327182856005736620401335236044660857382059254892391475202807188158142981130125051282518130855384387590366047102519342912701074718066083853379215578024771556017988209028155554787344746563945029055047326070303499294870026492499158288822037716469773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d77af96cc4ce6f52e53273465ba87a478b356d51
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (879 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkisto.kkv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecc.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecc.kkvnetwork.stage.geniem.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcca.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kilpailuvirasto.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kkv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kkv.kkvnetwork.stage.geniem.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kkvnetwork.stage.geniem.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konsumentradgivning.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuluttajaneuvonta.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuluttajansuoja-apuri.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuluttajaoikeus.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuluttajavirasto.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matkapaketti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matkapakettiapuri.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matkapakettivalvonta.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reklamaatio-apuri.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reklamaatioapuri.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.kkv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vakuusrekisteri.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valmismatka.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valmismatka.kkv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecc.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fcca.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kilpailuvirasto.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kkv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.konsumentradgivning.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kuluttajaneuvonta.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kuluttajansuoja-apuri.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kuluttajaoikeus.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kuluttajavirasto.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matkapaketti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matkapakettiapuri.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matkapakettivalvonta.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reklamaatio-apuri.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reklamaatioapuri.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vakuusrekisteri.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valmismatka.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--konsumentrdgivning-eub.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--konsumentrdgivning-eub.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a51bc1d7b0000040300483046022100d8cd9de0bbbe9a1164b41472219da7f9880ac2b36fef75df6de5ad5e78660c52022100dc70373a3b9260524407a9fb15914bfc0884c2e71368caf8d3773fee0143e5e10075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a51bc1dd50000040300463044022040f3e8c5a7c069cd99ee9b927792dacd628206f134e71da853cde54d1ec884b202207caa21454a6dee1a88117a5f03f8b48980bd8abd63d4ccd6dd66d021b1089e59
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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