justincraig.ac.uk

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number ba:11:74:b1:74:35:5f:45:13:31:eb:a8:0d:cb:60:98 was issued on by Google Trust Services LLC.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=justincraig.ac.uk

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ba:11:74:b1:74:35:5f:45:13:31:eb:a8:0d:cb:60:98
Serial Number (int): 247327043081453017155090026276355530904
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 22:81:9f:b9:9e:c6:0a:b9:3c:fb:dd:b4:72:71:df:53:0f:2e:cb:18
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): f3:84:ee:00:39:5b:b9:6d:1e:2a:8d:75:7c:13:08:e2:4b:f5:64:0d
Fingerprint (sha256): 6c:b8:9d:0a:16:0d:54:40:96:08:66:bc:e5:3c:04:06:7d:1e:f0:42:0d:3a:74:b6:12:79:81:07:b7:11:5e:60

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/RxeUP8XDO4k
CRL Distribution Point: http://crls.pki.goog/gts1p5/6xrg4Pu_Q3E.crl

Check the revocation status for certificate justincraig.ac.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for justincraig.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

justincraig.ac.uk
*.justincraig.ac.uk

Other certificates including the domain name justincraig.ac.uk

(limited to 100 certificates)
sni43344.cloudflaressl.com
justincraig.ac.uk
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
static1.justincraig.ac.uk
sni43344.cloudflaressl.com
static2.justincraig.ac.uk
static1.justincraig.ac.uk
sni.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
justincraig.ac.uk
justincraig.ac.uk
justincraig.ac.uk
static2.justincraig.ac.uk
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
justincraig.ac.uk
sni.cloudflaressl.com
*.justincraig.ac.uk
*.justincraig.ac.uk
sni.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
*.justincraig.ac.uk
sni43344.cloudflaressl.com
justincraig.ac.uk
*.justincraig.ac.uk
static1.justincraig.ac.uk
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
justincraig.ac.uk
justincraig.ac.uk
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
static2.justincraig.ac.uk
justincraig.ac.uk
sni43344.cloudflaressl.com
justincraig.ac.uk
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
justincraig.ac.uk
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
justincraig.ac.uk
static1.justincraig.ac.uk
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
justincraig.ac.uk
sni43344.cloudflaressl.com
static1.justincraig.ac.uk
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
justincraig.ac.uk
static2.justincraig.ac.uk
sni43344.cloudflaressl.com
static2.justincraig.ac.uk
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
justincraig.ac.uk
sni43344.cloudflaressl.com
*.justincraig.ac.uk
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
static1.justincraig.ac.uk
sni.cloudflaressl.com
sni43344.cloudflaressl.com
justincraig.ac.uk
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
static2.justincraig.ac.uk
sni43344.cloudflaressl.com
*.justincraig.ac.uk
justincraig.ac.uk
sni43344.cloudflaressl.com
justincraig.ac.uk
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com

Certificate

The complete raw certificate details for justincraig.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIRALoRdLF0NV9FEzHrqA3LYJgwDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxUDUwHhcNMjMxMDMwMTkxMTU3WhcNMjQwMTI4
MTkxMTU2WjAcMRowGAYDVQQDExFqdXN0aW5jcmFpZy5hYy51azCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAIImiMR23tsUnUkNihsrFF4L2vjJTTlkFpz/
wmpZzKuPSbulpVCAOyUNcs2W5olwkVksGu6OR/qVZ4daXY/CyEz6b2DMA96OsuFY
Ow5EmN4jOYbn8VfHh86/ysdDs2PufsyIaqi5GWRRZgtWK4mus2DZyuk1BxaH0/y5
cG+TXP7pfiaXFUHFOKXnb+xqukhotIfNVVBaLNM4XSw3kTYxvGkBk4vsd+x9bj/n
POF+ZNgalto6qDBhsdS/qu+X/gJLzje2apYyTtEEfmlx3iuMNP3Qm+pL9RfkW22x
lFcAbPb+vcjBLNpysJu7XX1SmuUwaVzLdb1lgthqTJjSKyj9T6MCAwEAAaOCAoww
ggKIMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNVHRMB
Af8EAjAAMB0GA1UdDgQWBBQigZ+5nsYKuTz73bRycd9TDy7LGDAfBgNVHSMEGDAW
gBTV/J4N3x7K3QiXl24rxV/FK/XsuDB4BggrBgEFBQcBAQRsMGowNQYIKwYBBQUH
MAGGKWh0dHA6Ly9vY3NwLnBraS5nb29nL3MvZ3RzMXA1L1J4ZVVQOFhETzRrMDEG
CCsGAQUFBzAChiVodHRwOi8vcGtpLmdvb2cvcmVwby9jZXJ0cy9ndHMxcDUuZGVy
MDEGA1UdEQQqMCiCEWp1c3RpbmNyYWlnLmFjLnVrghMqLmp1c3RpbmNyYWlnLmFj
LnVrMCEGA1UdIAQaMBgwCAYGZ4EMAQIBMAwGCisGAQQB1nkCBQMwPAYDVR0fBDUw
MzAxoC+gLYYraHR0cDovL2NybHMucGtpLmdvb2cvZ3RzMXA1LzZ4cmc0UHVfUTNF
LmNybDCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AO7N0GTV2xrOxVy3nbTNE6Iy
h0Z8vOzew1FIWUZxH7WbAAABi4I25oIAAAQDAEcwRQIhALEinb6zMWznHKc/f6Lq
eFeEMZBx5OojprL48aaKhWsPAiAHZbyJE54eVGdvzkd5UbnvqP1jFQSL6ateUiZD
/ixekgB1ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABi4I25sYA
AAQDAEYwRAIgXT+nvNDBuGSGx7MEFxpp0KPMJ6JdK+tIcdL4/BAioNsCIDF+nMMt
CdmC7NxVgdgN6I0IbXw4lKCfE89zmwReon0BMA0GCSqGSIb3DQEBCwUAA4IBAQAR
7I3MUqrh0o/sVEUXEFQZ8l1AbvbHuJ1+NN2p8+9HVlNILvs+wzzbn3y8MxnoBJdT
aikCksXeI9356vNW1lI2dPrQAW5g+nouC5vTXtItM5vVvgDG9gRNRIJRRknrckPt
EXAmqO8Xs5TU4MOwGGaeITutMV8uAH8f3Yo/CY6nl3CVxuLFghUGIDwSaqQoHzgO
L/eMZ9qezplSVyYR1OwtZE58ApazKdqRqSobXfIjETJ1PDEe7kT9lPqY/U3AoaRc
b9M1WK0jrm+PW+Yo/9a62L1eK9PVMe3dbFcCQI0jc4eFjTGQPAbVhWAPkEJe2dy6
2dwLbsfee+LBGvcLPv6j
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiaIxHbe2xSdSQ2KGysU
Xgva+MlNOWQWnP/CalnMq49Ju6WlUIA7JQ1yzZbmiXCRWSwa7o5H+pVnh1pdj8LI
TPpvYMwD3o6y4Vg7DkSY3iM5hufxV8eHzr/Kx0OzY+5+zIhqqLkZZFFmC1Yria6z
YNnK6TUHFofT/Llwb5Nc/ul+JpcVQcU4pedv7Gq6SGi0h81VUFos0zhdLDeRNjG8
aQGTi+x37H1uP+c84X5k2BqW2jqoMGGx1L+q75f+AkvON7ZqljJO0QR+aXHeK4w0
/dCb6kv1F+RbbbGUVwBs9v69yMEs2nKwm7tdfVKa5TBpXMt1vWWC2GpMmNIrKP1P
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 247327043081453017155090026276355530904
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-30 19:11:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-28 19:11:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'justincraig.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16429981591393911304462407796591145648631685239014329025094374437814423571553640696483171971363482738146892579743974640207410006527580800720655450495228281308790601715193215034467303641835505271261060784724228915624736962416723414472565407071460621041373454846881264061593908453911707103263227908206055253182839021068333449987183182529761156372888735740195419383205329352305765641802495902775372279679424835877361356024968639638522897522923643329155472008983175358124221425851468876080368519501746737537126362603723604216584332275183615481520162922555941954805805741080466984789273194955291335617435195974538820931491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							22819fb99ec60ab93cfbddb47271df530f2ecb18
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/RxeUP8XDO4k'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justincraig.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.justincraig.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/6xrg4Pu_Q3E.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b8236e6820000040300473045022100b1229dbeb3316ce71ca73f7fa2ea785784319071e4ea23a6b2f8f1a68a856b0f02200765bc89139e1e54676fce477951b9efa8fd6315048be9ab5e522643fe2c5e92007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b8236e6c6000004030046304402205d3fa7bcd0c1b86486c7b304171a69d0a3cc27a25d2beb4871d2f8fc1022a0db0220317e9cc32d09d982ecdc5581d80de88d086d7c3894a09f13cf739b045ea27d01
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0011ec8dcc52aae1d28fec544517105419f25d406ef6c7b89d7e34dda9f3ef475653482efb3ec33cdb9f7cbc3319e80497536a290292c5de23ddf9eaf356d6523674fad0016e60fa7a2e0b9bd35ed22d339bd5be00c6f6044d4482514649eb7243ed117026a8ef17b394d4e0c3b018669e213bad315f2e007f1fdd8a3f098ea7977095c6e2c5821506203c126aa4281f380e2ff78c67da9ece9952572611d4ec2d644e7c0296b329da91a92a1b5df2231132753c311eee44fd94fa98fd4dc0a1a45c6fd33558ad23ae6f8f5be628ffd6bad8bd5e2bd3d531eddd6c5702408d237387858d31903c06d585600f90425ed9dcbad9dc0b6ec7de7be2c11af70b3efea3