tls.automattic.com

Issued by R3

About this certificate

This digital certificate with serial number 04:59:01:23:2e:57:8d:98:32:a6:8c:c2:87:47:6f:be:79:ac was issued on by Let's Encrypt.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:59:01:23:2e:57:8d:98:32:a6:8c:c2:87:47:6f:be:79:ac
Serial Number (int): 378735786281317856758593694874296179915180
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bf:4a:b4:f1:1d:d6:aa:c8:dc:f9:98:f0:23:f4:af:ba:5e:a0:ac:76
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bf:ea:f5:cb:2e:05:09:f5:b3:d5:ab:bb:27:15:16:80:7e:91:c4:26
Fingerprint (sha256): 88:b5:e3:9b:0b:72:64:26:50:68:ce:90:65:cf:5a:8c:56:2a:78:87:cf:57:a6:cc:1d:f4:0a:ae:1a:7d:6c:c5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tls.automattic.com

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

archerpainters.co.nz
aweigh.poetry.blog
culturalmusings.music.blog
cycletouringadventures.com
gabe-turner.com
idslot88.poetry.blog
instagramfreeviews.science.blog
markaleomusic.com
markarms.com
markarmstrongillustration.com
markbessey.blog
medsarenottheanswer.org
myquotesandpoem.poetry.blog
needleandshed.com
nicolaemarinescu.com
nikostogo.com
nyusafetytraining.com
plusminusfitness.com
prooilfieldinspection.com
radianceandbeauty.com
rcde2022.com
robertsonadvisory.com
safecitiessa.com
seoistanbul.car.blog
socialseriesclubhindi.family.blog
tls.automattic.com
uat-blog.camfrog.com
www.archerpainters.co.nz
www.aweigh.poetry.blog
www.culturalmusings.music.blog
www.helbaal.com
www.idslot88.poetry.blog
www.instagramfreeviews.science.blog
www.markaleomusic.com
www.markarms.blog
www.markbessey.blog
www.medsarenottheanswer.org
www.myquotesandpoem.poetry.blog
www.needleandshed.com
www.nighthawk.blog
www.nyusafetytraining.com
www.plusminusfitness.com
www.prooilfieldinspection.com
www.rcde2022.com
www.robertsonadvisory.com
www.safecitiessa.com
www.seoistanbul.car.blog
www.socialseriesclubhindi.family.blog
www.uat-blog.camfrog.com
zensations.blog

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE3l2CJ+NYVBmxZycy7cuTKlhLhSK3
dFfyRx6cA3kZFAug2wZjpaRDH7k2xxAyVkm4QskDkkW7KTLgbgoserR24w==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 378735786281317856758593694874296179915180
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-17 21:56:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-16 21:56:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004de5d8227e3585419b1672732edcb932a584b8522b77457f2471e9c037919140ba0db0663a5a4431fb936c710325649b842c9039245bb2932e06e0a2c7ab476e3
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bf4ab4f11dd6aac8dcf998f023f4afba5ea0ac76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1203 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archerpainters.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aweigh.poetry.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culturalmusings.music.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cycletouringadventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gabe-turner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idslot88.poetry.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instagramfreeviews.science.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markaleomusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markarms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markarmstrongillustration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markbessey.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medsarenottheanswer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myquotesandpoem.poetry.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'needleandshed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicolaemarinescu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nikostogo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nyusafetytraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plusminusfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prooilfieldinspection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radianceandbeauty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcde2022.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robertsonadvisory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safecitiessa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seoistanbul.car.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socialseriesclubhindi.family.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-blog.camfrog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.archerpainters.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aweigh.poetry.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.culturalmusings.music.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helbaal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idslot88.poetry.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.instagramfreeviews.science.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.markaleomusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.markarms.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.markbessey.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medsarenottheanswer.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myquotesandpoem.poetry.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.needleandshed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nighthawk.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nyusafetytraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plusminusfitness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prooilfieldinspection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rcde2022.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robertsonadvisory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safecitiessa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seoistanbul.car.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.socialseriesclubhindi.family.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uat-blog.camfrog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zensations.blog'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018eee46779100000403004730450220412415a3e8398e7c92636c83587c65637a90070d1b1eef010affee24cc9a7a64022100c6de9f95d6478dccd036a8920677b43c2c5e6ebae02ad0593ab19e6cecf634510077001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018eee46778b0000040300483046022100f3e84e089bf9a2673cfdf08b5026e9c3a87574a42a88323c2cb4f2e6ce484c01022100e94144a73385af596bdc8a6f2a6de9b4b2c02e4731cd7760d6920139ebafe831
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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