justincraig.ac.uk

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 71:4b:f1:8e:60:7a:96:a8:0d:39:63:05:65:b8:5c:fa was issued on by Google Trust Services LLC.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=justincraig.ac.uk

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 71:4b:f1:8e:60:7a:96:a8:0d:39:63:05:65:b8:5c:fa
Serial Number (int): 150597085129057924136198542465049320698
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: c9:05:76:1b:98:62:fc:21:d0:92:ad:31:30:67:28:cf:b6:80:a5:cb
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): bd:22:60:07:41:52:73:f8:d3:01:31:f1:04:7e:5b:70:33:6c:66:5d
Fingerprint (sha256): 85:5c:ff:dd:21:73:bd:57:c1:a3:ff:94:fc:7c:d4:15:d1:34:56:8f:f9:ad:4c:62:d6:06:d5:60:13:2f:e3:3e

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/zyAOlb8O_eQ
CRL Distribution Point: http://crls.pki.goog/gts1p5/jIxzAS7JDcg.crl

Check the revocation status for certificate justincraig.ac.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for justincraig.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

justincraig.ac.uk
*.justincraig.ac.uk

Other certificates including the domain name justincraig.ac.uk

(limited to 100 certificates)
sni43344.cloudflaressl.com
justincraig.ac.uk
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
static1.justincraig.ac.uk
sni43344.cloudflaressl.com
static2.justincraig.ac.uk
static1.justincraig.ac.uk
sni.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
justincraig.ac.uk
justincraig.ac.uk
justincraig.ac.uk
static2.justincraig.ac.uk
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
justincraig.ac.uk
sni.cloudflaressl.com
*.justincraig.ac.uk
*.justincraig.ac.uk
sni.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
*.justincraig.ac.uk
sni43344.cloudflaressl.com
justincraig.ac.uk
*.justincraig.ac.uk
static1.justincraig.ac.uk
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
justincraig.ac.uk
justincraig.ac.uk
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
static2.justincraig.ac.uk
justincraig.ac.uk
sni43344.cloudflaressl.com
justincraig.ac.uk
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
justincraig.ac.uk
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
justincraig.ac.uk
static1.justincraig.ac.uk
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
justincraig.ac.uk
sni43344.cloudflaressl.com
static1.justincraig.ac.uk
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
justincraig.ac.uk
static2.justincraig.ac.uk
sni43344.cloudflaressl.com
static2.justincraig.ac.uk
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
justincraig.ac.uk
sni43344.cloudflaressl.com
*.justincraig.ac.uk
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
static1.justincraig.ac.uk
sni.cloudflaressl.com
sni43344.cloudflaressl.com
justincraig.ac.uk
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com
static2.justincraig.ac.uk
sni43344.cloudflaressl.com
*.justincraig.ac.uk
justincraig.ac.uk
sni43344.cloudflaressl.com
justincraig.ac.uk
sni43344.cloudflaressl.com
sni43344.cloudflaressl.com

Certificate

The complete raw certificate details for justincraig.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIQcUvxjmB6lqgNOWMFZbhc+jANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzETMBEGA1UEAxMKR1RTIENBIDFQNTAeFw0yMzA5MDExNjA1MDBaFw0yMzExMzAx
NjA0NTlaMBwxGjAYBgNVBAMTEWp1c3RpbmNyYWlnLmFjLnVrMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCHUh/ucjDfLocQsT/Y1gAH4rAKKLxpgMzjL
fXJMRJcEKNlZW/EAcDtWkKadkIVQS9Mdo5aKazUZEIitartOWBV4KBFXbIFBSQTe
TlbKDViVsz6YRMljWezBtLx1J6sq3HpxQTcfoTAAvDKHd9E2IuOpJ7h3Ej8Z0Btn
L2RDc59g2/V9lxF0yb/tGm79JJ4skMAEipGqFUUr9yVNT7cwd+CNE1fH8Fscm/Gq
XRnYFJbClio0O4pUqvB+Noirb5h1a5YW3DlLtp4q925IE/pGTtrMUA7w1KzU3d3Y
QoI+e3LlIsXmKuHv3fCk2I8I1r2l38lDggvNNlsPRyxaaFoMSwIDAQABo4ICjTCC
AokwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB
/wQCMAAwHQYDVR0OBBYEFMkFdhuYYvwh0JKtMTBnKM+2gKXLMB8GA1UdIwQYMBaA
FNX8ng3fHsrdCJeXbivFX8Ur9ey4MHgGCCsGAQUFBwEBBGwwajA1BggrBgEFBQcw
AYYpaHR0cDovL29jc3AucGtpLmdvb2cvcy9ndHMxcDUvenlBT2xiOE9fZVEwMQYI
KwYBBQUHMAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0czFwNS5kZXIw
MQYDVR0RBCowKIIRanVzdGluY3JhaWcuYWMudWuCEyouanVzdGluY3JhaWcuYWMu
dWswIQYDVR0gBBowGDAIBgZngQwBAgEwDAYKKwYBBAHWeQIFAzA8BgNVHR8ENTAz
MDGgL6AthitodHRwOi8vY3Jscy5wa2kuZ29vZy9ndHMxcDUvakl4ekFTN0pEY2cu
Y3JsMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYA6D7Q2j71BjUy51covIlryQPT
y9ERa+zraeF3fW0GvW4AAAGKUbSMmAAABAMARzBFAiBVBX+UtHbOjvc1O01AGyn6
Y38ivEyUbJ/ia1d4trLShwIhALspLdUdDNcxxTi+Ts8vspYHzzIw5UI56/Lh4Wwx
QXj2AHYAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGKUbSM7gAA
BAMARzBFAiEA2gjGazwGh5hfcC+U+nnb+cG257GhY3WS0o66mNXNSB4CIGyVNLhG
INQYqa7J2bucGZerMq9akTApPAoPZcli+McpMA0GCSqGSIb3DQEBCwUAA4IBAQAx
xUTAizFb98bqfNZ/hTzQWZqLwdRXnWsNUlMnozKxsF5yP++HK5i7LPWRKlO4qKWm
IgKg2XDJYoTMHcomDPTUFUFY87yk/BuEsbV3v3s0U0pL7R9J0XoF6wppks6rLeX/
kmu/eOvnpKinS0TxAP/GHVDv1OElvE3ku6Q6uWhmF+gL65cNjLHK3y5e8NlDqZqo
M+g10JdbGd1U+Swwyi7UszxB3PZIhNVaK4q54RH6xdJNJ9Aj6uTlrx1+BzTqrIhI
ZwRvZVZi2Ovi8qfa2E40SHaqWMYUrr9b8ALNVumNPT/ypZxP6CDqFw2xRyKYgK2H
Ka8FDK2DtrpX/7av1wUi
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCHUh/ucjDfLocQsT/Y1
gAH4rAKKLxpgMzjLfXJMRJcEKNlZW/EAcDtWkKadkIVQS9Mdo5aKazUZEIitartO
WBV4KBFXbIFBSQTeTlbKDViVsz6YRMljWezBtLx1J6sq3HpxQTcfoTAAvDKHd9E2
IuOpJ7h3Ej8Z0BtnL2RDc59g2/V9lxF0yb/tGm79JJ4skMAEipGqFUUr9yVNT7cw
d+CNE1fH8Fscm/GqXRnYFJbClio0O4pUqvB+Noirb5h1a5YW3DlLtp4q925IE/pG
TtrMUA7w1KzU3d3YQoI+e3LlIsXmKuHv3fCk2I8I1r2l38lDggvNNlsPRyxaaFoM
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 150597085129057924136198542465049320698
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-01 16:05:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-30 16:04:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'justincraig.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23244530407099700568939589165998523316505053591788865183439219724250458946927498068066904002241208575496790459510903734041694428786680433576489886529569596482474517972431009962320313871678976797063517093433813399117173149896497704178412396447828336542622350081064659262434211503244369367214625555249244075266589741114565382667039548622103722514394774016330158230047218447015017387533711974825472346529625104884888642668040887078414235563273177694207797422452295937543837135401777470069405637352897523789076663905487912269080283714326529668549181242931039427842742089341176575035737542008663248200928740401813837712459
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c905761b9862fc21d092ad31306728cfb680a5cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/zyAOlb8O_eQ'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justincraig.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.justincraig.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/jIxzAS7JDcg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a51b48c980000040300473045022055057f94b476ce8ef7353b4d401b29fa637f22bc4c946c9fe26b5778b6b2d287022100bb292dd51d0cd731c538be4ecf2fb29607cf3230e54239ebf2e1e16c314178f60076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a51b48cee0000040300473045022100da08c66b3c0687985f702f94fa79dbf9c1b6e7b1a1637592d28eba98d5cd481e02206c9534b84620d418a9aec9d9bb9c1997ab32af5a9130293c0a0f65c962f8c729
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0031c544c08b315bf7c6ea7cd67f853cd0599a8bc1d4579d6b0d525327a332b1b05e723fef872b98bb2cf5912a53b8a8a5a62202a0d970c96284cc1dca260cf4d4154158f3bca4fc1b84b1b577bf7b34534a4bed1f49d17a05eb0a6992ceab2de5ff926bbf78ebe7a4a8a74b44f100ffc61d50efd4e125bc4de4bba43ab9686617e80beb970d8cb1cadf2e5ef0d943a99aa833e835d0975b19dd54f92c30ca2ed4b33c41dcf64884d55a2b8ab9e111fac5d24d27d023eae4e5af1d7e0734eaac884867046f655662d8ebe2f2a7dad84e344876aa58c614aebf5bf002cd56e98d3d3ff2a59c4fe820ea170db147229880ad8729af050cad83b6ba57ffb6afd70522