bf-tools.net

Issued by R3

About this certificate

This digital certificate with serial number 04:ab:5d:f5:0a:7c:c4:46:14:dc:5a:ed:a8:a9:22:4f:8d:e4 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bf-tools.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ab:5d:f5:0a:7c:c4:46:14:dc:5a:ed:a8:a9:22:4f:8d:e4
Serial Number (int): 406762318999568934021211704099840271027684
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 49:e2:74:7c:d7:a9:03:b7:24:d5:3c:6a:45:30:37:f3:1e:b7:f4:d6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b0:22:f0:e0:24:44:30:bc:f1:72:a0:d5:03:dd:f9:b5:ba:95:eb:80
Fingerprint (sha256): 8d:43:10:1e:e2:33:41:4e:0a:8a:cc:5a:32:90:7b:9a:c4:0f:be:a1:7a:c0:a1:70:fb:03:8c:e3:cf:5b:d1:03

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bf-tools.net

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bf-tools.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

a-staging.bf-ad.net
a.bf-ad.net
a.bf-tools.net
admanager.conunity.io
article.bunte.de
article.fitforfun.de
article.netdoktor.de
article.netmoms.de
article.tvspielfilm.de
article.tvtoday.de
beta.corona-care.de
bf-tools.net
brokervergleich.finanzen100.de
cardscout.de
emq.bf-tools.net
etf-sparplan.finanzen100.de
fol-staging.cardscout.de
m-article.fitforfun.de
m-article.netdoktor.de
m-article.tvspielfilm.de
m-article.tvtoday.de
m-staging.cardscout.de
rtt.bf-tools.net
sloma-stage.bf-tools.net
sloma.bf-tools.net
stg-brokervergleich.finanzen100.de
stg-etf-sparplan.finanzen100.de
stg-onvista.depot.bestcheck.de
stg-onvista.festgeld.bestcheck.de
stg-onvista.tagesgeld.bestcheck.de
user-rating-dev.burda-forward.de
user-rating-stg.burda-forward.de
user-rating.burda-forward.de
v.finanzen100.de
v.netmoms.de
web-vitals.bfops.io
welt-staging.cardscout.de
welt.cardscout.de
widget-stg.bunte.de
widget-stg.fitforfun.de
widget-stg.netmoms.de
widget.bunte.de
widget.fitforfun.de
widget.netmoms.de
widgets-dev.burda-forward.de
widgets-stg.burda-forward.de
widgets.burda-forward.de
www-staging.cardscout.de
www.amica.de
www.cardscout.de
www.corona-care.de

Other certificates including the domain name bf-tools.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for bf-tools.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcEsLeZiHWJNg9/jQIoi
cFoBAPGWdsXHPVcytqEliCX2hG1E8qIt4F4qv8wArSLr2nsAe57/cf6btw0YrkZP
CTvNUkvCaAMYvg6PrUjXRFLsjvQ8MI9zrjejX70iuHx4KFK9bmmBy5iplH/JHzxL
MGhIjtYc3H9Z75quxco2o6GA1UGXdYodhElL3/fG5yVOVF+mbuqb4qJ8X+xoFEeo
Kl4cLweZMnpJwIqeYr0FvV4O3SRiK77qtM9jmWxSOIcss/8wf43gxdXKXKVXLMA2
tFXigp4yqk4hQbV5/3gCkEYrGyj3iaM87l3mWoyDMRfH39WX1yJLexqJcv13Nc33
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 406762318999568934021211704099840271027684
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-06 13:36:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-05 13:36:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bf-tools.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23954296585778726963548950708985989183492115699521568237903517091035745548602818164351963127335272854805289209079148378402745844239452407260673257951166936070647104593340306863192090929670209541950010245977684629073152204976616137361674084179514559162101351434721941606985130736261557503569429097526409347692436085464563435454977113552640305298879796332900548158693370178681916187311710609351788301913271056139189478798052260179629890511145635737941280815858623011924567192196808352067177491070090480981471477607000165746646181797693028965029168748897668556786678662183947038777467944598098341745864925691705530644331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							49e2747cd7a903b724d53c6a453037f31eb7f4d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1200 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a-staging.bf-ad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.bf-ad.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.bf-tools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admanager.conunity.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.bunte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.fitforfun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.netdoktor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.netmoms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.tvspielfilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'article.tvtoday.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.corona-care.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bf-tools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brokervergleich.finanzen100.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emq.bf-tools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etf-sparplan.finanzen100.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fol-staging.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-article.fitforfun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-article.netdoktor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-article.tvspielfilm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-article.tvtoday.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-staging.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtt.bf-tools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sloma-stage.bf-tools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sloma.bf-tools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-brokervergleich.finanzen100.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-etf-sparplan.finanzen100.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-onvista.depot.bestcheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-onvista.festgeld.bestcheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-onvista.tagesgeld.bestcheck.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-rating-dev.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-rating-stg.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-rating.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.finanzen100.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v.netmoms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-vitals.bfops.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welt-staging.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welt.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget-stg.bunte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget-stg.fitforfun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget-stg.netmoms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget.bunte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget.fitforfun.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget.netmoms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets-dev.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets-stg.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets.burda-forward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-staging.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amica.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corona-care.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000017bbb8a701b000004030048304602210094082a2517c42ade37a95b83772dacff95f5b295e41fe6b57a56c80a9ea46c45022100d567f4b5926da819d7c97801826789f44ce822d963a5d69e38219705ffd2c31e007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017bbb8a70150000040300473045022100af0594b3b3e2a29cff1a11dca922a258fdc885a03086a657ffd27ed086c8463502205f8c37072d251a5785e7f8ccdeb3ec1ce33261a8ca326026d3829100375a6bd4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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