keirunga.org.nz

Issued by USERTrust RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 87:e7:80:fe:a2:0d:48:c0:80:98:73:11:e4:18:6d:aa was issued on by The USERTRUST Network.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=keirunga.org.nz

The USERTRUST Network

Organization: The USERTRUST Network
State / Province: New Jersey
Locality: Jersey City
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 87:e7:80:fe:a2:0d:48:c0:80:98:73:11:e4:18:6d:aa
Serial Number (int): 180647816327820365249301314631592603050
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: d2:fe:d6:15:ab:e3:2d:70:e3:87:3f:f8:78:b6:f7:a2:87:67:d7:45
AuthorityKeyId: a6:c1:e7:e1:f4:f6:47:63:d7:2f:7d:8d:90:f8:ba:23:4f:60:ac:9e

Fingerprint (sha1): 75:d3:c1:93:c7:88:c5:24:5a:41:1a:58:68:eb:a0:a7:43:3b:99:35
Fingerprint (sha256): 8f:d9:ed:5a:ae:5b:58:ba:b3:21:25:94:f8:dd:e4:af:1e:0e:6e:ad:3e:ee:7d:26:61:df:c9:49:9d:1a:e0:ac

Issuing Certificate URL: http://crt.usertrust.com/USERTrustRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/USERTrustRSADomainValidationSecureServerCA.crl

Check the revocation status for certificate keirunga.org.nz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for keirunga.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

keirunga.org.nz
www.keirunga.org.nz

Other certificates including the domain name keirunga.org.nz

(limited to 100 certificates)
oratiaunited.co.nz
sporty.co.nz
waibopfootball.co.nz
sporty.co.nz
www.katikatifc.co.nz
keirunga.org.nz
pcbasketballclub.co.nz
pcbasketballclub.co.nz
www.pkjsports.co.nz
keirunga.org.nz
karakasportspark.co.nz
www.waitakerecityfc.org.nz
hockeymanawatu.org.nz
maristinvercargill.co.nz
hockeymanawatu.org.nz
keirunga.org.nz
www.aucklandsoftball.org.nz
sporty.co.nz
www.brooklyncroquetclub.org
www.thesalmonrun.nz
www.schoolground.nz
maristinvercargill.co.nz
whangareirowingclub.org.nz
keirunga.org.nz
www.unimountafc.org.nz
www.greenhithefootball.org
sportsground.co.nz
www.bowlswestcoast.org.nz

Certificate

The complete raw certificate details for keirunga.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGozCCBYugAwIBAgIRAIfngP6iDUjAgJhzEeQYbaowDQYJKoZIhvcNAQELBQAw
gZMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVyc2V5MRQwEgYDVQQHEwtK
ZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBOZXR3b3JrMTkwNwYD
VQQDEzBVU0VSVHJ1c3QgUlNBIERvbWFpbiBWYWxpZGF0aW9uIFNlY3VyZSBTZXJ2
ZXIgQ0EwHhcNMjIxMDIxMDAwMDAwWhcNMjMxMDI5MjM1OTU5WjAaMRgwFgYDVQQD
Ew9rZWlydW5nYS5vcmcubnowggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCrNnJhF6jNKlwaT4nOSVi3qOyQJ62Ub42fVwwlOl2/4hYFr/wADtxSKRvQOGts
xM6o5STUWraHU1CAghLdp2cYKR8s+tHB8zJv85shABVfNZl1tuXHfvnlfeO95AOr
RdSWAXGxk1rNyPpUXr4t/MchbbD0qTwIE81KBSQJGfBB3sKwdFK6bsvlcKk9z7yM
FuLJgcNbHU3f3SrDyVna+e4wfjJZzIYS+0h6UMqYmizASW+K9xPL+/JtvzQfp1f0
tITJMXXI816QeaHkG/uSui1gI7DXhAWyv1yRvV+h7FDSs5VJ5RaxTiaw8DdnlsYS
3gcluxMPD9HyFY9DT59sxp2PAgMBAAGjggNoMIIDZDAfBgNVHSMEGDAWgBSmwefh
9PZHY9cvfY2Q+LojT2CsnjAdBgNVHQ4EFgQU0v7WFavjLXDjhz/4eLb3oodn10Uw
DgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMEwGA1UdIARFMEMwNwYMKwYBBAGyMQECAQMEMCcwJQYIKwYB
BQUHAgEWGWh0dHBzOi8vY3BzLnVzZXJ0cnVzdC5jb20wCAYGZ4EMAQIBMFgGA1Ud
HwRRME8wTaBLoEmGR2h0dHA6Ly9jcmwudXNlcnRydXN0LmNvbS9VU0VSVHJ1c3RS
U0FEb21haW5WYWxpZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3JsMIGKBggrBgEFBQcB
AQR+MHwwUwYIKwYBBQUHMAKGR2h0dHA6Ly9jcnQudXNlcnRydXN0LmNvbS9VU0VS
VHJ1c3RSU0FEb21haW5WYWxpZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3J0MCUGCCsG
AQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1c3QuY29tMC8GA1UdEQQoMCaCD2tl
aXJ1bmdhLm9yZy5ueoITd3d3LmtlaXJ1bmdhLm9yZy5uejCCAX0GCisGAQQB1nkC
BAIEggFtBIIBaQFnAHUArfe++nz/EMiLnT2cHj4YarRnKV3PsQwkyoWGNOvcgooA
AAGD+YrmzAAABAMARjBEAiAne/C/hfzRfVbzrvq5paEM5vWjDMzvpysWHct5MTO4
wwIga86I5INKHELzfntkLjIxueu3FAnYHu1pq6zEQQ87oPUAdgB6MoxU2LcttiDq
OOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYP5iuaPAAAEAwBHMEUCIQD5sBQRrjLA
+CBuaLiDe9wcYEtR0qkCk3wAxW618FhTrQIgZpQwWKy2/3BJqYXOMiI+OpSprT00
I/jdkKhD5yI0o1kAdgDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAA
AYP5iuZoAAAEAwBHMEUCIQCzn8LhjJ5whcJneWNFYH6lkZbZrjmhpIhwdkyAynxq
+AIgMQFuDw+sGr0ALQbvw4AiC2itrC2QB9x8aBZzHdRnoaowDQYJKoZIhvcNAQEL
BQADggEBAKbjj6U17Qdx1A5QKWQTNlk9y5N3hGGAC/DTjwrEcySe1C+WIftq3idf
L7EfVaQncE6IOrw2prwpjE60mvpRc/uagAbyJJFRa3HBAsNTtIeCHBzI+HTqu8in
o1VFSeedXKsB142Jm20pR39JXAGHdoJZF0GB4HIuY7HX0Sn+5Se3qCuHG1Dqr8mk
Wj/Aamcd0Z21NeZIaZzXbedvwiWuMKJnf7MMgFtS90mlrqOnF43KyUottaYgmKY3
GHSGCxuU0YJxbpmN1M8QifYWxTVsArfHBF8xVOh+o9EBcS6wyd0vhnBLf/uHpLo+
/l5X6InBNJGTEKniQqXfvIC++PY/tdI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzZyYReozSpcGk+JzklY
t6jskCetlG+Nn1cMJTpdv+IWBa/8AA7cUikb0DhrbMTOqOUk1Fq2h1NQgIIS3adn
GCkfLPrRwfMyb/ObIQAVXzWZdbblx3755X3jveQDq0XUlgFxsZNazcj6VF6+LfzH
IW2w9Kk8CBPNSgUkCRnwQd7CsHRSum7L5XCpPc+8jBbiyYHDWx1N390qw8lZ2vnu
MH4yWcyGEvtIelDKmJoswElvivcTy/vybb80H6dX9LSEyTF1yPNekHmh5Bv7krot
YCOw14QFsr9ckb1foexQ0rOVSeUWsU4msPA3Z5bGEt4HJbsTDw/R8hWPQ0+fbMad
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 180647816327820365249301314631592603050
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jersey City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The USERTRUST Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USERTrust RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'keirunga.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21613598863989014491603655083179576147565374923079404366190320808058897226295369583643467581092601154324122656469065441714780472178234795342624598183641254641914642628299751299393765949557488367532146823815848001149211547363790857535628179943364896441588585795669466873799002357979690541120731609689408895084094436104482240823933836654833337270924399847941507762573931750002752303013151195019471391388309268474537190878652058392672803027022695956097656997001813589292206936488005968053255038719133302210310554955515683992376909084216442956875962565672463444545203036853493879069703663479545297677572483783957573705103
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a6c1e7e1f4f64763d72f7d8d90f8ba234f60ac9e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d2fed615abe32d70e3873ff878b6f7a28767d745
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (81 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/USERTrustRSADomainValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/USERTrustRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keirunga.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keirunga.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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