www.apseng.com.au

Issued by StartCom Class 1 DV Server CA

About this certificate

This digital certificate with serial number 62:b9:66:af:05:74:9e:d6:d0:7a:af:9e:e6:9e:6b:b8 was issued on by StartCom Ltd..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.apseng.com.au

StartCom Ltd.

Organization: StartCom Ltd.
Organization unit: StartCom Certification Authority
Country: IL

This certificate has expire since

Certificate Details

Serial Number (hex): 62:b9:66:af:05:74:9e:d6:d0:7a:af:9e:e6:9e:6b:b8
Serial Number (int): 131227001178147121663205615327936146360
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 9e:e9:62:c4:bf:10:fa:d7:4e:a9:ce:29:ef:4b:49:5c:1a:d5:67:ea
AuthorityKeyId: d7:91:4e:01:c4:b0:bf:f8:c8:67:93:44:9c:e7:33:fa:ad:93:0c:af

Fingerprint (sha1): 65:e6:17:35:62:68:31:d4:79:7a:27:3d:36:8c:f1:e0:3e:ff:bc:e5
Fingerprint (sha256): 5f:6f:e8:98:5f:2f:78:9c:db:62:33:48:d0:94:9c:29:7c:bc:0f:1e:0a:a1:9c:4b:65:55:d1:ea:61:38:10:64

Issuing Certificate URL: http://aia.startssl.com/certs/sca.server1.crt

Revocation information

OCSP Server: http://ocsp.startssl.com
CRL Distribution Point: http://crl.startssl.com/sca-server1.crl

Check the revocation status for certificate www.apseng.com.au

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.apseng.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.apseng.com.au

Other certificates including the domain name apseng.com.au

(limited to 100 certificates)
preview.appscreens.com
alpha.swingwizard.ai
hanumanth.live
sni101559.cloudflaressl.com
justice.is
apseng.com.au
www.tietheknot.tk
apseng.com.au
sni101559.cloudflaressl.com
sni101559.cloudflaressl.com
sni60649.cloudflaressl.com
sni101559.cloudflaressl.com
sni101559.cloudflaressl.com
sni60649.cloudflaressl.com
aldanisvigo.com
beankonducta.com
dev.innvox.com
sni101559.cloudflaressl.com
karantradingcompany.com
vans.apseng.com.au
www.apseng.com.au
sni101559.cloudflaressl.com
sni101559.cloudflaressl.com
vans.apseng.com.au
sni60649.cloudflaressl.com
sni60649.cloudflaressl.com
www.lucienbevernagestraat5.be
sni101559.cloudflaressl.com
sni60649.cloudflaressl.com
www.apseng.com.au
sni101559.cloudflaressl.com
apseng.com.au
sni101559.cloudflaressl.com
sni101559.cloudflaressl.com
www.leximapping.com
onboarding.fliptable.io
artisansplayhouse.com
sni101559.cloudflaressl.com
apseng.com.au
sni60649.cloudflaressl.com
www.codexplosion.org
sni101559.cloudflaressl.com
sni101559.cloudflaressl.com
graffiti.icists.org
www.johannesmueller.com
keyx.dev
www.apseng.com.au
sni101559.cloudflaressl.com
ffc.tshembo.com
www.waypointdev.net
sni101559.cloudflaressl.com
www.apseng.com.au
artisansplayhouse.com
www.apseng.com.au
www.leximapping.com
www.apseng.com.au
reactfood.femiajayi.com
finepay.io

Certificate

The complete raw certificate details for www.apseng.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF6DCCBNCgAwIBAgIQYrlmrwV0ntbQeq+e5p5ruDANBgkqhkiG9w0BAQsFADB4
MQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjEpMCcGA1UECxMg
U3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxJjAkBgNVBAMTHVN0YXJ0
Q29tIENsYXNzIDEgRFYgU2VydmVyIENBMB4XDTE2MDUyOTA4NTMzOFoXDTE3MDUy
OTA4NTMzOFowHDEaMBgGA1UEAwwRd3d3LmFwc2VuZy5jb20uYXUwggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvS/6+YWaPlqmLb6q2pNtmxDUUbWCCPJ3n
EJr/XKSxKhBzZowaRbJoPXd+++vBA/u2QHmdxCDos68wdQXyYHl7uQj5m34JGKnQ
YQ1TAzsVlB+c57HHDbZZNwQ7Fsu25f4kIZkiO3t6GsakOcd4ROrwvRz8+HI99Jos
Alo8x5LVbTXL23WmlNREpMeYmR9RIcsU+FY3xN6ge8J+hT+d986lUHdIYSWkuNgw
qTD/Zls/IFQElmNweHQfseQEbC3I+cnOEF6Pxy5hhaAJMBnJpytWiyHnu6k7w+pK
lIUadXa7nwOBA2og1Wok537lry0Z3u1EqExDURxzWQKGPGh0HPh9AgMBAAGjggLI
MIICxDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUF
BwMBMAkGA1UdEwQCMAAwHQYDVR0OBBYEFJ7pYsS/EPrXTqnOKe9LSVwa1WfqMB8G
A1UdIwQYMBaAFNeRTgHEsL/4yGeTRJznM/qtkwyvMG8GCCsGAQUFBwEBBGMwYTAk
BggrBgEFBQcwAYYYaHR0cDovL29jc3Auc3RhcnRzc2wuY29tMDkGCCsGAQUFBzAC
hi1odHRwOi8vYWlhLnN0YXJ0c3NsLmNvbS9jZXJ0cy9zY2Euc2VydmVyMS5jcnQw
OAYDVR0fBDEwLzAtoCugKYYnaHR0cDovL2NybC5zdGFydHNzbC5jb20vc2NhLXNl
cnZlcjEuY3JsMBwGA1UdEQQVMBOCEXd3dy5hcHNlbmcuY29tLmF1MCMGA1UdEgQc
MBqGGGh0dHA6Ly93d3cuc3RhcnRzc2wuY29tLzBRBgNVHSAESjBIMAgGBmeBDAEC
ATA8BgsrBgEEAYG1NwECBTAtMCsGCCsGAQUFBwIBFh9odHRwczovL3d3dy5zdGFy
dHNzbC5jb20vcG9saWN5MIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAaPaY+B9k
gr46jO65KB1M/HFRXWeT1ETRCmesu09P+8QAAAFU++Gk7AAABAMASDBGAiEAzrQh
rZ6D7lDuOSs81+VbMM3jyP3ruLg38x8WElUdArwCIQCq6E6oxyJB9so6H+sPOmBt
hnipNHw84RETgCeRTlpq+wB2AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7I
DdwQAAABVPvhpb4AAAQDAEcwRQIgZZECACjyflly2qecCUqvGVO0h3A6+RdNqGd3
bE047fwCIQDfeC+5MiHa/woIJ+FgGhUDKr4RqxJ9FYgOZFVU92SdnjANBgkqhkiG
9w0BAQsFAAOCAQEAHRL0bxFZTAHpTwTLS9484HgawzGCyE6WuWWdRPGJqOfnuO1F
9wnpWskzBQ/cgDblIk/XIOyT5+KCJ/K7ro4loqBqe7ZuLoVP2UvFMXto6ZY3PPOb
WB41RbkbyQnoMT10LP9bf/+dTzx+tgJ4AgPHCVDnnoFuAEGP+5tlRfo3YzBsW1j+
A+Ku9YEBSXJyg7NJha1Jk5MEj+RlaGWp0GjZW+0h+liUZG86KL/B+aO4yokEu0ET
4+U1a5bZna+pHhoVllgScAGOoLkgIg7cmFrqgYvsx6sN+1lcvGUoRO87jGJMy4oY
F2KdFrMqatSpgnBvDCxLn9lNEqR2zyiPQDsr9A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70v+vmFmj5api2+qtqTb
ZsQ1FG1ggjyd5xCa/1yksSoQc2aMGkWyaD13fvvrwQP7tkB5ncQg6LOvMHUF8mB5
e7kI+Zt+CRip0GENUwM7FZQfnOexxw22WTcEOxbLtuX+JCGZIjt7ehrGpDnHeETq
8L0c/PhyPfSaLAJaPMeS1W01y9t1ppTURKTHmJkfUSHLFPhWN8TeoHvCfoU/nffO
pVB3SGElpLjYMKkw/2ZbPyBUBJZjcHh0H7HkBGwtyPnJzhBej8cuYYWgCTAZyacr
Vosh57upO8PqSpSFGnV2u58DgQNqINVqJOd+5a8tGd7tRKhMQ1Ecc1kChjxodBz4
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 131227001178147121663205615327936146360
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'StartCom Class 1 DV Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-29 08:53:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-29 08:53:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.apseng.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30208429463684260344151987637247113144603440090220037554970393864586256526227089219510748526465707768068329192475489313057985195017714738279862056865491872443909264224246970598409766650589626579747655907473316369839110397496166145509789001050204922116082967369158574162100167929869671743206450491703832148433104719905064641263427030804576257826440858965552638570118707465164101704911290831769238962401423484712674675715397191349739458082165795375149369362650777275464397252317820386806504106301167950901462366375785231762373751787846671782529949318780763270637171683849869621798441870375825941090472309904135560165501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9ee962c4bf10fad74ea9ce29ef4b495c1ad567ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d7914e01c4b0bff8c86793449ce733faad930caf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.startssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.startssl.com/certs/sca.server1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.startssl.com/sca-server1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apseng.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.startssl.com/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.23223.1.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.startssl.com/policy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc400000154fbe1a4ec0000040300483046022100ceb421ad9e83ee50ee392b3cd7e55b30cde3c8fdebb8b837f31f1612551d02bc022100aae84ea8c72241f6ca3a1feb0f3a606d8678a9347c3ce111138027914e5a6afb007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000154fbe1a5be000004030047304502206591020028f27e5972daa79c094aaf1953b487703af9174da867776c4d38edfc022100df782fb93221daff0a0827e1601a15032abe11ab127d15880e645554f7649d9e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001d12f46f11594c01e94f04cb4bde3ce0781ac33182c84e96b9659d44f189a8e7e7b8ed45f709e95ac933050fdc8036e5224fd720ec93e7e28227f2bbae8e25a2a06a7bb66e2e854fd94bc5317b68e996373cf39b581e3545b91bc909e8313d742cff5b7fff9d4f3c7eb602780203c70950e79e816e00418ffb9b6545fa3763306c5b58fe03e2aef5810149727283b34985ad499393048fe4656865a9d068d95bed21fa5894646f3a28bfc1f9a3b8ca8904bb4113e3e5356b96d99dafa91e1a1596581270018ea0b920220edc985aea818becc7ab0dfb595cbc652844ef3b8c624ccb8a1817629d16b32a6ad4a982706f0c2c4b9fd94d12a476cf288f403b2bf4