git.cglcloud.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cd:3f:5e:7c:b0:ba:0d:6e:c9:44:64:57:61:25:27:0c:3d was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=git.cglcloud.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cd:3f:5e:7c:b0:ba:0d:6e:c9:44:64:57:61:25:27:0c:3d
Serial Number (int): 331178974982732804830006632735891643632701
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9a:a0:27:86:cb:a2:f6:52:72:c7:b6:58:69:95:53:c9:cb:50:80:b2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 84:7e:cf:33:a1:c6:a2:80:76:57:13:8d:4e:a6:c4:11:74:19:47:df
Fingerprint (sha256): 60:9d:c7:2d:46:16:f7:f2:13:75:1d:87:c4:09:98:b9:77:97:f2:e4:aa:5f:cc:2c:15:25:82:b9:9e:64:af:2c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate git.cglcloud.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for git.cglcloud.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assets.git.cglcloud.com
avatars.git.cglcloud.com
codeload.git.cglcloud.com
gist.git.cglcloud.com
git.cglcloud.com
media.git.cglcloud.com
pages.git.cglcloud.com
raw.git.cglcloud.com
render.git.cglcloud.com
uploads.git.cglcloud.com

Other certificates including the domain name cglcloud.com

(limited to 100 certificates)
git-engineering.cglcloud.com
csbsui.cglcloud.com
*.refapps.cglcloud.com
cglcloud.com
git.cglcloud.com
*.cglcloud.com
*.git-engineering.cglcloud.com
*.cglcloud.com
sni.cloudflaressl.com
waffle.cglcloud.com
sni.cloudflaressl.com
git.cglcloud.com
*.cglcloud.com
cglcloud.com
csbsui.cglcloud.com
ilc.cglcloud.com
git.cglcloud.com
cglcloud.com
git-engineering.cglcloud.com
*.cglcloud.com
*.cglcloud.com
*.refapps.cglcloud.com
sni.cloudflaressl.com
*.cglcloud.com
*.cglcloud.com
*.refapps.cglcloud.com
cptnuswebsiteallmdcccxxxiv.cglcloud.com
*.cglcloud.com
flake-analyzer.cglcloud.com
git.cglcloud.com
*.git-engineering.cglcloud.com
waffle.cglcloud.com
git-engineering.cglcloud.com
git-engineering.cglcloud.com
*.cglcloud.com
waffle.cglcloud.com
cptnstaticadddnsmccclxxxv.cglcloud.com
git.cglcloud.com
git-engineering.cglcloud.com
wiki.cglcloud.com
*.refapps.cglcloud.com
wiki.cglcloud.com
git.cglcloud.com
cglcloud.com
git.cglcloud.com
waffle.cglcloud.com
alpha-demo.cglcloud.com
cglcloud.com
csbsui.cglcloud.com
git.cglcloud.com
git.cglcloud.com
git.cglcloud.com
cglcloud.com
cglcloud.com
xuntest-static.cglcloud.com
sni.cloudflaressl.com
*.cglcloud.com
ilc.cglcloud.com
*.cglcloud.com
csbsui.cglcloud.com
git.cglcloud.com
*.cglcloud.com
cglcloud.com
*.git-engineering.cglcloud.com
*.cglcloud.com
ccpcaptain.com
cglcloud.com
*.cglcloud.com
cptnuswebsiteallmccxcrcii.cglcloud.com
cglcloud.com
git-engineering.cglcloud.com

Certificate

The complete raw certificate details for git.cglcloud.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGOTCCBSGgAwIBAgISA80/Xnywug1uyURkV2ElJww9MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MDEwMDQyNDJaFw0x
OTExMzAwMDQyNDJaMBsxGTAXBgNVBAMTEGdpdC5jZ2xjbG91ZC5jb20wggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0tYeMRgpKUGr5p+ELDpXKHD/ncb/F
s+wBCu7RQBGwFOFk+R494eRP5U40r1vF+ddNvT5BX4ezuTmH34xUw62A4JNUCn8B
vFuFty/x7BDQE4Rb9zQhWss8JVVFJgx8gYcEVj9JUKvUEKn0C4W4BfrBXgjBI5HH
kyTci/CEhLQuYkZEgP29LlzjkZFrPZDxhrvVUikKJHlvwXzb/J000zpcWZB1pVvE
XCjxkN02ovtdkazR+ma2s+fLdmh5YqGyCKE0QnDvE7iAlhSu0Zvb6iJ8XgBLmZ1s
IdGTrQEUma7lBRpaLoJGrJ8UI3Af5MKiDB1/ztsXjI11WMnNQtwmJX3dAgMBAAGj
ggNGMIIDQjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJqgJ4bLovZScse2WGmVU8nL
UICyMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEB
BGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0
Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0
Lm9yZy8wgfsGA1UdEQSB8zCB8IIXYXNzZXRzLmdpdC5jZ2xjbG91ZC5jb22CGGF2
YXRhcnMuZ2l0LmNnbGNsb3VkLmNvbYIZY29kZWxvYWQuZ2l0LmNnbGNsb3VkLmNv
bYIVZ2lzdC5naXQuY2dsY2xvdWQuY29tghBnaXQuY2dsY2xvdWQuY29tghZtZWRp
YS5naXQuY2dsY2xvdWQuY29tghZwYWdlcy5naXQuY2dsY2xvdWQuY29tghRyYXcu
Z2l0LmNnbGNsb3VkLmNvbYIXcmVuZGVyLmdpdC5jZ2xjbG91ZC5jb22CGHVwbG9h
ZHMuZ2l0LmNnbGNsb3VkLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEE
AYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9y
ZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AHR+2oMxrTMQkSGcziVPQnDCv/1e
QiAIxjc1eeYQe8xWAAABbOp9GAgAAAQDAEcwRQIhAMT2t21tdBVjiRx+HbDO0AL+
yXtnm1hmlYAp/cLC1nXWAiB2nflgr6DAvDMobxvWgMpoCo2FFek/ai1hByCgcPua
cwB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4AAABbOp9GCAAAAQD
AEcwRQIhALN8z7iR8E2RJ/HYv7hXXU5PuhvyRkq+9ZYxHOgFxV+OAiAPIj3rp3nS
7lHPuB+8UnPoobTW4pfbf9bmxfw7zh51jDANBgkqhkiG9w0BAQsFAAOCAQEADtxY
yM9DKmMf+ddP1rTtjKWF0QPdB/X1GyvWcTSVXDhuWjfROAG7Ets/WV3h8lPEXvEj
Ed1N7ESn+2rnoc9XsNqRhMGOyw74sQTVAarK/Qwi1IGZFq+NGshYQvzblldUlUI2
28yk2oDoouYOUSaSt6SxGbcY00+KFZ2vfl5StND8jXlp/yMwUAXOtBU3vFOwkZ/V
8hFi9DWUx/4t8snj3/JyU3HSApYuaTE2TRsDPTU8cHrwRqgWKRa08/Ei5g2/zyoC
lWpubu4QxF0oiiqIP4YY0B3Pdj5w4BtJv3UBd78Z8OaODIdLeY6nq7vEpKTYgEAx
jiVZzf8Jf+QAkuZfyA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9LWHjEYKSlBq+afhCw6V
yhw/53G/xbPsAQru0UARsBThZPkePeHkT+VONK9bxfnXTb0+QV+Hs7k5h9+MVMOt
gOCTVAp/Abxbhbcv8ewQ0BOEW/c0IVrLPCVVRSYMfIGHBFY/SVCr1BCp9AuFuAX6
wV4IwSORx5Mk3IvwhIS0LmJGRID9vS5c45GRaz2Q8Ya71VIpCiR5b8F82/ydNNM6
XFmQdaVbxFwo8ZDdNqL7XZGs0fpmtrPny3ZoeWKhsgihNEJw7xO4gJYUrtGb2+oi
fF4AS5mdbCHRk60BFJmu5QUaWi6CRqyfFCNwH+TCogwdf87bF4yNdVjJzULcJiV9
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331178974982732804830006632735891643632701
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-01 00:42:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-30 00:42:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'git.cglcloud.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30891661936644530997033394092580477913251061163447244740617975213250059688743477872044794462613330327531443025904196267931976475224915983895280299357745973931302962208273686882624952033013241046868050531556337906463913840125234080462266664360254716297360497503137553635907168748194510975271081861257497471972026841593302924545866993902558242558523310524232763082330103048470025140440355591777335184493709640295472338557863287009083918061646828280242763880385979759826139077877997465987057263054756543416559805044082437455863176155960963138165685663879241807293520131439275074766717446270048457145838587230226890456541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9aa02786cba2f65272c7b658699553c9cb5080b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.git.cglcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avatars.git.cglcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codeload.git.cglcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gist.git.cglcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'git.cglcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.git.cglcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages.git.cglcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raw.git.cglcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'render.git.cglcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uploads.git.cglcloud.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016cea7d18080000040300473045022100c4f6b76d6d741563891c7e1db0ced002fec97b679b5866958029fdc2c2d675d60220769df960afa0c0bc33286f1bd680ca680a8d8515e93f6a2d610720a070fb9a73007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016cea7d18200000040300473045022100b37ccfb891f04d9127f1d8bfb8575d4e4fba1bf2464abef596311ce805c55f8e02200f223deba779d2ee51cfb81fbc5273e8a1b4d6e297db7fd6e6c5fc3bce1e758c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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