sporty.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 03:ab:fa:80:7a:04:9c:41:65:41:ab:b9:23:b9:53:ce:72:07 was issued on by Let's Encrypt.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sporty.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ab:fa:80:7a:04:9c:41:65:41:ab:b9:23:b9:53:ce:72:07
Serial Number (int): 319858116626524581633712840995942177862151
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 20:f6:95:e4:39:23:09:d0:2a:28:58:17:85:c4:f9:c5:82:37:06:ba
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 67:8f:6d:54:0b:64:53:02:60:39:f0:9e:43:d5:9e:e4:ae:ac:a5:03
Fingerprint (sha256): 83:d3:a1:10:d3:4b:bc:19:19:8e:c2:eb:e4:65:e5:1d:5a:cd:f1:83:d3:bb:5d:56:b7:6f:06:4f:d3:c1:06:2b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.co.nz

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ahiparagamefishclub.co.nz
ashleyforestrallysprint.co.nz
aucklandrugby.co.nz
aucklandsquashjuniors.nz
boptouch.co.nz
bowlshawkesbay.org.nz
bullernetball.co.nz
csa.org.nz
eakfc.org
ecbsoftball.org.nz
hbsfc.co.nz
juniorcricket.co.nz
karakatennis.co.nz
kensingtonfitness.co.nz
mandevillesports.co.nz
manurewaswimmingclub.co.nz
marketground.co.nz
marlborough-car-club.co.nz
marlboroughvolleyball.org.nz
morningtonbowlingclub.co.nz
nelsonfarmersmarket.co.nz
nelsonfarmersmarket.org.nz
nelsonsoftball.org.nz
netballwairarapa.co.nz
northharboursoftball.co.nz
nskfc.org.nz
nzpowerlifting.co.nz
osssa.org.nz
otahuhuroversrugbyleague.co.nz
ponsonbybowls.nz
porritt.school.nz
ratec.org.nz
rbpc.nz
schoolground.com
shoreroversnetball.co.nz
sissnetball.co.nz
sportotago.co.nz
sportsground.com
sporty.co.nz
stewartalexander.co.nz
tasportscycling.co.nz
temata.school.nz
tgahockey.co.nz
touchnorthharbour.co.nz
tutangiora.nz
twyford.school.nz
waiopehu.ac.nz
wellingtonrnr.org.nz
wmcc.net.nz
woodendrugby.co.nz

Other certificates including the domain name sporty.co.nz

(limited to 100 certificates)

Certificate

The complete raw certificate details for sporty.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA348/YwvBZxcgHcpCOJpk
RTUFbqytLulBs/ZlpEOq3k05x8iVX98Idwp6eflBcMVTnmEcimbKuEUPYdgh1ZJ5
ji0u+2K1B9Psl+IvMOBQWGTcEX/elkzPnf5UVv1UEnGBqdcXkrCQaUqH8qGhI1U1
OswPm2ih6Qg+qBVkGaEhu/BdWMP77V3emHnl1uWpwdZUsDCW/bpKIXMiF+p3hyDB
AZYI4PxyOP7qVF8w36Il8Ie4LNK8W90X7bm0OHg3sL28iNe04R+1RiuFrgaPKG+X
zZuQGBTFUetNj5U6ED9ghcrK0Hr9XtFCKjgsnwM561wEOnxkdN/6Fl95ixM0DZ5O
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319858116626524581633712840995942177862151
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-04 00:16:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-02 00:16:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28221780034206795297807152975936720542361857781521788940015661158890893810367893026154661421445727433875640229603412901659880089983656147260270517498961911182966543035894515791124545696612751180225935476670942694987670276287468553939183883212880523619876972931722399174311968962857318347936403533119995452841465622102603354637695152433268491195988178910789985024663700813387076018932675369285507732967124986044225521163007304325595581121967618842419795036267115747293089567220088038140365827073942007101436835194588940274023254517353354713070925724872277282295828652509950624630430681605981364562352070254884407889637
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							20f695e4392309d02a28581785c4f9c5823706ba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1047 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahiparagamefishclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashleyforestrallysprint.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandsquashjuniors.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boptouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlshawkesbay.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bullernetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eakfc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecbsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbsfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juniorcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakatennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kensingtonfitness.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mandevillesports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manurewaswimmingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlborough-car-club.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughvolleyball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morningtonbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballwairarapa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northharboursoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nskfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzpowerlifting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osssa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otahuhuroversrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponsonbybowls.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porritt.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratec.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbpc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoreroversnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sissnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportotago.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stewartalexander.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasportscycling.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temata.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tgahockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchnorthharbour.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tutangiora.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twyford.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waiopehu.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonrnr.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmcc.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodendrugby.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187e455411a0000040300473045022100e6ee8e436755b39856084bdcd6fa76d74ef800701194dc3f236545df599be0240220023c2a457ea74bc7a7c6b066d5928bf52917841a267bc9059fd1fc4fd5a60dc2007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000187e4554148000004030046304402206cb0d2507f742d6ff6ed1314b9f0c90715ea5110d2b201e8189a77389d9fe42d02206aec90f230a73ae40ebe83a7af9932d32df71af855960f1f36a8b34c1a470b8a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00511cce88ba93ef7fa89afe2ae4a304de576f5709fd20af68eda9205a4e3523f977c9c20d59657f3943d402a6f405b589c3a9241106ddf8cf752dcb7770eda6bf53127f9ecacaab530c22ee3cf78dc3399639007c638aca539c6c7c790abda8df4f327c7d9301e0ac624e5216c89e626b7a605ec416a735bf1946b2bf130ad7f4c94c58397fd678564b275d59f5dba7ffe54f32d04b7fc83d35e048df18a351f9685caef78241a9f690b09469e92468083f948fde0d53b7aa18449debb14fe7d8bff9cf59fccc2ff42f3616dfc0647526a3722d6745463d78882b9b39dfeb86be229923af130764df6a36285c66a256f9f574d3e5100a15097efe715811b83f5e