cs21.com.mx

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:39:c4:a7:e1:96:57:9f:82:7d:0c:01:c6:87:1a:c1:e4:56 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cs21.com.mx

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:39:c4:a7:e1:96:57:9f:82:7d:0c:01:c6:87:1a:c1:e4:56
Serial Number (int): 280994353085976954414626784655246243259478
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 21:42:a0:a3:6f:51:d2:8e:87:1e:97:a8:36:67:3a:d9:77:b9:a4:e1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e6:4b:98:5c:31:82:ef:04:61:c7:39:17:bc:30:93:bc:da:a8:94:d6
Fingerprint (sha256): 6e:11:aa:1d:5a:63:c3:ab:c9:fc:fa:3d:36:50:c2:9a:5b:db:b9:be:54:29:10:5d:32:eb:fd:4b:13:63:9d:cb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cs21.com.mx

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cs21.com.mx

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.cs21.com.mx
autodiscover.navaxtreme.com
cpanel.cs21.com.mx
cpanel.navaxtreme.com
cs21.com.mx
cs21.pregaweb.com
mail.cs21.com.mx
mail.navaxtreme.com
navaxtreme.com
navaxtreme.pregaweb.com
webdisk.cs21.com.mx
webdisk.navaxtreme.com
webmail.cs21.com.mx
webmail.navaxtreme.com
www.cs21.com.mx
www.cs21.pregaweb.com
www.navaxtreme.com
www.navaxtreme.pregaweb.com

Other certificates including the domain name cs21.com.mx

(limited to 100 certificates)
navaxtreme.com
bombasalmo.com
bombasalmo.com
cs21.com.mx
cs21.com.mx
cs21.com.mx
cs21.com.mx
bombasalmo.com
cs21.com.mx
bombasalmo.com
cs21.com.mx

Certificate

The complete raw certificate details for cs21.com.mx in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGzTCCBbWgAwIBAgISAznEp+GWV5+CfQwBxocaweRWMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODExMjAwOTM4MTdaFw0x
OTAyMTgwOTM4MTdaMBYxFDASBgNVBAMTC2NzMjEuY29tLm14MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LrE1chxWvF6y2J3969pJl8R0yqZGSTcLkEw
TUgPqdBsTX+rvAsODIpGePqHb8SMEExfV4fIoz5A3XpQYQZonQkj7KvsjJ1/HHwX
lkc05VvLrRWoatbVQ7apb6nXmMhMmHtZENhF3VTbaAnl/jC/ebRgQ0TGx1mlYQ2f
49tn0jydHdRhiP7ndP/py+qVUEgCqykraxMf8DkLONcWiqnPcNm1KwnNohFEBjv/
R3j+CRsfiolMSDEkt+Wydf+xlui27l4051KtgrVGYKmTgXC9+Kh0bWVXuNrmXiXE
9JMA1eiIUj37/aOrBOMEv0bYlVGwb4RFTemyKb92sdHvRmVBvwIDAQABo4ID3zCC
A9swDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQhQqCjb1HSjocel6g2ZzrZd7mk4TAf
BgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEw
LgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcw
LwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcv
MIIBkgYDVR0RBIIBiTCCAYWCGGF1dG9kaXNjb3Zlci5jczIxLmNvbS5teIIbYXV0
b2Rpc2NvdmVyLm5hdmF4dHJlbWUuY29tghJjcGFuZWwuY3MyMS5jb20ubXiCFWNw
YW5lbC5uYXZheHRyZW1lLmNvbYILY3MyMS5jb20ubXiCEWNzMjEucHJlZ2F3ZWIu
Y29tghBtYWlsLmNzMjEuY29tLm14ghNtYWlsLm5hdmF4dHJlbWUuY29tgg5uYXZh
eHRyZW1lLmNvbYIXbmF2YXh0cmVtZS5wcmVnYXdlYi5jb22CE3dlYmRpc2suY3My
MS5jb20ubXiCFndlYmRpc2submF2YXh0cmVtZS5jb22CE3dlYm1haWwuY3MyMS5j
b20ubXiCFndlYm1haWwubmF2YXh0cmVtZS5jb22CD3d3dy5jczIxLmNvbS5teIIV
d3d3LmNzMjEucHJlZ2F3ZWIuY29tghJ3d3cubmF2YXh0cmVtZS5jb22CG3d3dy5u
YXZheHRyZW1lLnByZWdhd2ViLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3Bgsr
BgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0
Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3AOJpS64m6OlACeiGG7Y7g9Q+
5/50iPukjyiTAZ3d8dv+AAABZzCzBDkAAAQDAEgwRgIhAOIBFbWWD7GSYA6yvcRi
t3S81t8OCeYVDEXr7h78H/wRAiEA24KvK7so71iIDL5mIcan+W4Uvi1/4znXcRNG
/qtaZykAdgBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWcwswSD
AAAEAwBHMEUCIQCpStZkJPMYjrP35Fut1PwJTQm3vB5FSFic7kZBjl5lAAIgNhpi
KYMK3Osgu8aMGas1VbtLEJ+SxLP5bTKXnvpzZdYwDQYJKoZIhvcNAQELBQADggEB
AGYKgnwDZ2zXDRKQw5yyd+FfCVYAucMtzsuUaZQWN6CDvCld75g6ZZpbFxELVYQS
jHqzPtENnOY+o6dVKFFDOHU3TJHzzqQ55p2cmKc6iTCyuiv0bHyEl+UTRM7766D2
p9UOHsQxYLfsZmeck1Rwba3Ya5nFZTGNCFxv2SUhQ3tnZIQnb8hDs95EgmY9fyFD
tKsc6nulfMXOjT4iQKpgOoft/wiM94kORIFkjLBEdIaudgK0V420dTiDHx/aN40s
+sx766U5vuqL0c+TSjRuLDQr9fXryqz79De9zYHwC/zHT8FZ/XbKslB8UB0gENpH
jdq9oUdCeCTukPk0TI86j7c=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LrE1chxWvF6y2J3969p
Jl8R0yqZGSTcLkEwTUgPqdBsTX+rvAsODIpGePqHb8SMEExfV4fIoz5A3XpQYQZo
nQkj7KvsjJ1/HHwXlkc05VvLrRWoatbVQ7apb6nXmMhMmHtZENhF3VTbaAnl/jC/
ebRgQ0TGx1mlYQ2f49tn0jydHdRhiP7ndP/py+qVUEgCqykraxMf8DkLONcWiqnP
cNm1KwnNohFEBjv/R3j+CRsfiolMSDEkt+Wydf+xlui27l4051KtgrVGYKmTgXC9
+Kh0bWVXuNrmXiXE9JMA1eiIUj37/aOrBOMEv0bYlVGwb4RFTemyKb92sdHvRmVB
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280994353085976954414626784655246243259478
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-20 09:38:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-18 09:38:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cs21.com.mx'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26854619823601448429748581411849040213189220715835668961534726376618707115467380777059454958642004417867129226024653246699191174843349074037929807414044154705580200261882854001890365131234430224341761859423132536431359943907918158464849625215017597198765642103070822103651229806063751473182750914316126077085753440634229290184334332184192998253175412199661832627079005517654447859514336666716132398432053710794240150191156385686512571163161829675990815124517272596535636914560867207384172776177753553389057356522180293187423991686716296010314362154926817486482691222150340098653096872742807126604626036927427059728831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2142a0a36f51d28e871e97a836673ad977b9a4e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (393 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cs21.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.navaxtreme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.cs21.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.navaxtreme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs21.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs21.pregaweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cs21.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.navaxtreme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navaxtreme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navaxtreme.pregaweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.cs21.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.navaxtreme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.cs21.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.navaxtreme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cs21.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cs21.pregaweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.navaxtreme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.navaxtreme.pregaweb.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016730b304390000040300483046022100e20115b5960fb192600eb2bdc462b774bcd6df0e09e6150c45ebee1efc1ffc11022100db82af2bbb28ef58880cbe6621c6a7f96e14be2d7fe339d7711346feab5a672900760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016730b304830000040300473045022100a94ad66424f3188eb3f7e45badd4fc094d09b7bc1e4548589cee46418e5e65000220361a6229830adceb20bbc68c19ab3555bb4b109f92c4b3f96d32979efa7365d6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00660a827c03676cd70d1290c39cb277e15f095600b9c32dcecb9469941637a083bc295def983a659a5b17110b5584128c7ab33ed10d9ce63ea3a7552851433875374c91f3cea439e69d9c98a73a8930b2ba2bf46c7c8497e51344cefbeba0f6a7d50e1ec43160b7ec66679c9354706dadd86b99c565318d085c6fd92521437b676484276fc843b3de4482663d7f2143b4ab1cea7ba57cc5ce8d3e2240aa603a87edff088cf7890e4481648cb0447486ae7602b4578db47538831f1fda378d2cfacc7beba539beea8bd1cf934a346e2c342bf5f5ebcaacfbf437bdcd81f00bfcc74fc159fd76cab2507c501d2010da478ddabda147427824ee90f9344c8f3a8fb7