arkiv.status.geoikt.no

Issued by R3

About this certificate

This digital certificate with serial number 03:47:74:5e:1e:60:15:2a:53:94:72:16:3d:14:64:75:a5:0b was issued on by Let's Encrypt.

With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=arkiv.status.geoikt.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:47:74:5e:1e:60:15:2a:53:94:72:16:3d:14:64:75:a5:0b
Serial Number (int): 285651584986167865426530137335584483812619
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9c:a1:9a:17:db:5d:0b:b1:49:66:4d:d5:c6:88:e8:3e:5b:9b:4d:19
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7f:3b:93:f5:08:82:0c:ab:93:ca:9a:a3:84:37:14:31:4c:2b:5e:0c
Fingerprint (sha256): 6f:4b:5e:e3:23:f4:19:16:4e:ea:9e:72:d0:b3:ac:6e:3e:50:50:e4:6d:1d:57:86:d4:c9:30:74:70:01:9f:fd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate arkiv.status.geoikt.no

38

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for arkiv.status.geoikt.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arkiv.status.geoikt.no
cu.status.jasper.com
floridablue-status.pager.com
status-page.gurado.io
status.accessmanagement.motion.abb.com
status.advisorsexcel.com
status.anypayx.com
status.basehq.com
status.byggtjeneste.no
status.chasehistory.net
status.cloud.virtana.com
status.coniq.com
status.courier.com
status.digitraffic.fi
status.dmdata.jp
status.efficientlearning.com
status.evolveip.eu
status.gericall.nl
status.herocoders.com
status.iexapis.com
status.inaxus.com
status.koin.network
status.lambdalabs.com
status.livingsecurity.com
status.loopup.com
status.medius.com
status.namirial.com
status.ouraring.com
status.surfly.jp
status.tartu.ee
status.trimessa.nl
status.trueipsolutions.com
status.usemechanic.com
status.wasabi.com
statuspage.sports.gracenote.com
uhg.status.netskope.io
www.cypressstatus.com
www.gitpodstatus.com

Other certificates including the domain name geoikt.no

(limited to 100 certificates)
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
test-nvdb-client.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
demo-georeg-api.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
demo-nvdb-client.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
*.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no

Certificate

The complete raw certificate details for arkiv.status.geoikt.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1e2RvI3sVwX/4XzMFlZx
QU3tYohNLTMaF5q8R41cKfktJ7ID95wLJuFLLyxIkRmDo9UzqDau4AKTL/l2BAEv
AzonDvOQKm4MrJDuetrilYM84WTyu/LmYGG014B9tEc4a6hAiyZ2FE1Sk5c3X8p1
qgqyST60Bc3I6kwCcG4J4UEiK8buiXFLDqpIGvgpk1XnaI0s4jWCFcn7XmAlFhOG
JVuYbxhPR26QKAU6K4PTVa6e7+KJufQZwBo3ttcKADx9YiviPp6FYhswLcuLuZTq
GngbaZG8sIa5twgWEVGZzgWV8cbjW4n7YdYWWDLf8pOZv/Ul4Wmsor69P3jeEKbc
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285651584986167865426530137335584483812619
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-08 04:38:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-07 04:38:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'arkiv.status.geoikt.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27005908737628193260470832725485277941725270436634373986550004893971437879266136710991073599911179065356652498672143864171139532326527603410635301108634327465654157840113404643677202676204826135504090348893411792361596351692094963798991474175358714907066625753151597801856520541499952131595126540638125121494455315582499082426232234241642160823691299132464903441386100879351608602729917669220544947527238921585388175183778376286511416693772134725970395018000115351281916966820614663493980732788300895791971583632482426306677403640554553758317562653503281926968018241553925273016611500778865328339573225572343407369461
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9ca19a17db5d0bb149664dd5c688e83e5b9b4d19
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (873 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkiv.status.geoikt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cu.status.jasper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floridablue-status.pager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status-page.gurado.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.accessmanagement.motion.abb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.advisorsexcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.anypayx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.basehq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.byggtjeneste.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.chasehistory.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.cloud.virtana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.coniq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.courier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.digitraffic.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.dmdata.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.efficientlearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.evolveip.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.gericall.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.herocoders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.iexapis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.inaxus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.koin.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.lambdalabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.livingsecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.loopup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.medius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.namirial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.ouraring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.surfly.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.tartu.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.trimessa.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.trueipsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.usemechanic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.wasabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statuspage.sports.gracenote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhg.status.netskope.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cypressstatus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gitpodstatus.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018ce79439b5000004030047304502206da251cf321a28f1aec93e65ff0f5c6fa43a8c271967eef5c79b9dd04841efb5022100f6035dd27c49fdf8c01958a15cda8037f941bc97ff8fef7c5283b98a474e49d000750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ce79439ce00000403004630440220576c2af813ef54a441cb679f3271ab5f67c9f8da8b09b7c56548fd7cfa55f61b02203cebc3af12c4dd5d5631b7e05152fc4e8db652a5a0d0a7903422439c17a50480
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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