ewds2.strath.ac.uk

Issued by R3

About this certificate

This digital certificate with serial number 04:aa:94:0a:2a:d0:46:72:85:0b:6d:ab:d8:b6:17:6d:83:2e was issued on by Let's Encrypt.

With 35 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ewds2.strath.ac.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:aa:94:0a:2a:d0:46:72:85:0b:6d:ab:d8:b6:17:6d:83:2e
Serial Number (int): 406493924638307741825588959325915733394222
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ad:16:65:99:6f:6f:81:f7:75:c2:4b:7d:62:a1:f1:63:c0:92:e4:df
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bf:ac:27:99:43:7c:ce:2d:35:15:c3:93:36:d4:3d:0e:41:dd:e4:6e
Fingerprint (sha256): 91:ef:cc:db:e6:c0:20:2a:5f:ab:f9:74:e6:e2:25:49:f9:f5:7d:e4:92:27:9f:e3:5f:99:b3:26:90:1c:c3:a1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ewds2.strath.ac.uk

35

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ewds2.strath.ac.uk

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

activeforpeace.net
alternativecareguidelines.org
bio-nanomaterials-glasgow-2019.org.uk
candsurvey.uk
coproducingjustice.org.uk
directricescuidadoalternativo.org
eblip10.org
egpm.org.uk
ewds2.strath.ac.uk
expertsinuncertainty.net
is-glasgow2019.org.uk
lignesdirectricesprotectionderemplacement.org
scottishconstitutionalfutures.org
stardust2013.eu
stepupsmartcities.eu
su2p.com
trans.ac.uk
up-vlc.photonics.ac.uk
www.activeforpeace.net
www.alternativecareguidelines.org
www.bio-nanomaterials-glasgow-2019.org.uk
www.candsurvey.uk
www.copior.ac.uk
www.coproducingjustice.org.uk
www.directricescuidadoalternativo.org
www.eblip10.org
www.egpm.org.uk
www.expertsinuncertainty.net
www.is-glasgow2019.org.uk
www.lignesdirectricesprotectionderemplacement.org
www.scottishconstitutionalfutures.org
www.stardust2013.eu
www.stepupsmartcities.eu
www.su2p.com
www.trans.ac.uk

Other certificates including the domain name strath.ac.uk

(limited to 100 certificates)
ewds8.strath.ac.uk
its-adfs-f1.ds.strath.ac.uk
digitalassets.strath.ac.uk
sr-test.mis.strath.ac.uk
teledir.strath.ac.uk
ewds.strath.ac.uk
nourishcatering.strath.ac.uk
sbs-chain.sbs.strath.ac.uk
phys.strath.ac.uk
smtphost.cis.strath.ac.uk
cord.bioe.strath.ac.uk
ewds2.strath.ac.uk
new-t4-test.is.strath.ac.uk
training.myplace.strath.ac.uk
content.sbs.strath.ac.uk
its-scom-ms1.ds.strath.ac.uk
frm-eval1.is.strath.ac.uk
activeforpeace.net
spider.science.strath.ac.uk
fback-dsp.is.strath.ac.uk
aria-dev.eee.strath.ac.uk
aria-dev.eee.strath.ac.uk
adm-ts14.ds.strath.ac.uk
www.medea.gsb.strath.ac.uk
content.sbs.strath.ac.uk
guides.lib.strath.ac.uk
pureportal-staging.strath.ac.uk
pgrapps.strath.ac.uk
inteum.strath.ac.uk
ewds2.strath.ac.uk
local.cis.strath.ac.uk
vle.stams.strath.ac.uk
t4-test.is.strath.ac.uk
sunbird.strath.ac.uk
pfact.strath.ac.uk
ewds4.strath.ac.uk
fms.strath.ac.uk
outreach.mathstat.strath.ac.uk
www.cis.strath.ac.uk
inteum.strath.ac.uk
stage.myplace.strath.ac.uk
www.coshh.strath.ac.uk
digitool.lib.strath.ac.uk
sensible.eee.strath.ac.uk
www.alumni.strath.ac.uk
www.cis.strath.ac.uk
ewds.strath.ac.uk
innovation.strath.ac.uk
but.mis.strath.ac.uk
platform.sbs.strath.ac.uk
dev-ocs-aes.tds.strath.ac.uk
5gsummit.eee.strath.ac.uk
autodiscover.eee.strath.ac.uk
onlineshop.strath.ac.uk
5gsummit.eee.strath.ac.uk
gada.strath.ac.uk
smtphost.cis.strath.ac.uk
ewds8.strath.ac.uk
www.sbs.strath.ac.uk
aria-dev.eee.strath.ac.uk
tcnemo.strath.ac.uk
classes2016-2017.myplace.strath.ac.uk
erp-bus-2.ds.strath.ac.uk
www.coshh.strath.ac.uk
activeforpeace.net
cord.bioe.strath.ac.uk
www.metabolomics.strath.ac.uk
www.intranet.sbs.strath.ac.uk
supportal.dmem.strath.ac.uk
mercury.sbs.strath.ac.uk
5gsummit.eee.strath.ac.uk
seahorse.naome.strath.ac.uk
oracles.eee.strath.ac.uk
new-og.is.strath.ac.uk
platform.sbs.strath.ac.uk
beta-www.strath.ac.uk
map.cis.strath.ac.uk
imaphost.cis.strath.ac.uk
devweb2016.cis.strath.ac.uk
soolin.mis.strath.ac.uk
hub.is.strath.ac.uk
metro.mis.strath.ac.uk
pc-usage.its.strath.ac.uk
db-peg-test.is.strath.ac.uk
pureportal.strath.ac.uk
netlogin-dev.strath.ac.uk
DigiDocs.strath.ac.uk
devweb2018.cis.strath.ac.uk
simple4.ds.strath.ac.uk
www.imagesofresearch.strath.ac.uk
www.studygroup.com
mcampus.strath.ac.uk
classes.myplace.strath.ac.uk
pureportal.strath.ac.uk
map.cis.strath.ac.uk
naglog.is.strath.ac.uk
hub-web1.is.strath.ac.uk
pgrapps.strath.ac.uk
lss.mathstat.strath.ac.uk
aria-dev.eee.strath.ac.uk

Certificate

The complete raw certificate details for ewds2.strath.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 406493924638307741825588959325915733394222
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 12:01:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-13 12:01:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ewds2.strath.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2994768499331232176755519200000236280465506878273280957061440700579282000861956689891389120361926911186598847921004713434602489903875630602247302482989391941749493750501121391752783216117618624992419846108647314625683018873381053231359444332231390253855181723375678586153414121038451649255253708383357448493833157629388554370572151093403781595313016650488733331369131827375996886693681067092420554442351475230886752827500781318256104667365331333396907557441976669951604762366121975389551811321793012087854703897847917792644094930490157994587232891871911142024095448896713081900591997338399316295934178865793103061848823734192186103965117331169176220516888628062227404118858216328109302414158152029909821580186930923240202910391996250156034521283734992648347157720357495956124814476753720120141222534664995130351919686339327785982004380250174694245164599636782112816517078759200544225316467806367241368846024821298027667419129
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ad1665996f6f81f775c24b7d62a1f163c092e4df
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (902 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activeforpeace.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alternativecareguidelines.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bio-nanomaterials-glasgow-2019.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candsurvey.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coproducingjustice.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directricescuidadoalternativo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eblip10.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'egpm.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ewds2.strath.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expertsinuncertainty.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is-glasgow2019.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lignesdirectricesprotectionderemplacement.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scottishconstitutionalfutures.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stardust2013.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stepupsmartcities.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'su2p.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trans.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'up-vlc.photonics.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.activeforpeace.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alternativecareguidelines.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bio-nanomaterials-glasgow-2019.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.candsurvey.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.copior.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coproducingjustice.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.directricescuidadoalternativo.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eblip10.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.egpm.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.expertsinuncertainty.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.is-glasgow2019.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lignesdirectricesprotectionderemplacement.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scottishconstitutionalfutures.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stardust2013.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stepupsmartcities.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.su2p.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trans.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e4233af29000004030047304502201ade9f744289b4997855074eafa71da57f895776d061288fa0f2dc4d1a51c1b6022100ae779b7ff50afca9edf2fe0814621d9a167aba1d27c1b398d6f81bbba2e69c960075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e4233af260000040300463044022024fa5d48ec8d1b711622964d7277da6a4ffd98c805cf5c8c58f89aaa0a4645d0022010aa7efe215bd98872abebb627a385e8065c676fee05043de485aa0b8887182b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008439c59f3b519787aafc71b915d8e64751325b7735f03cfe914485b6373177be23defbc07a7067dfbfd86b6a4d4a938267c3c3002007faf5bb57c56441de03f34ebea6fcc98f9efbb7118c702d428eae113d03b3ebe6729ebab9f37069efa13a22882012a90ed5a0a98fe53a0423d1513b996830a4902e1c6a8cb4cfa1eac34010466b6f9d7293b3c8b5161aa5bc2c5795af96295ea9a951c3f3d4f5d2d958eeef93cf50b80aca2f643bfe595bc3be8f2bf1a4681a374afc6a2495043fed330ba7b715ab98f6f5364059e2c4e019688d9b7888ed4e056ebdd560c7319c0509c18b1253efcf1a21c1ed3430e236ab73739aba51ef610240fcf3d00a1191699136