new.airliquide.com

- AIR LIQUIDE SA POUR ETUDE EXPLOIT DES PROCEDES GEORGES CLAUDE -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0f:d5:6d:be:7c:68:ce:80:ac:d9:70:8d:c1:44:bf:a2 was issued on by DigiCert Inc.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

AIR LIQUIDE SA POUR ETUDE EXPLOIT DES PROCEDES GEORGES CLAUDE

Organization: AIR LIQUIDE SA POUR ETUDE EXPLOIT DES PROCEDES GEORGES CLAUDE
Organization unit: ALIT
Locality: PARIS
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:d5:6d:be:7c:68:ce:80:ac:d9:70:8d:c1:44:bf:a2
Serial Number (int): 21046605042142176804954987182453735330
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 39:c2:8a:91:de:7d:7d:d9:c4:95:c1:98:36:8a:0e:53:e4:44:4a:6d
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 6a:3c:85:07:3f:cf:ea:d9:47:4b:85:42:40:1d:6a:d7:7d:82:f1:8a
Fingerprint (sha256): 93:84:e3:a9:de:fb:b3:82:64:59:bc:d7:63:69:97:79:ff:63:f0:22:2f:19:4a:b7:1a:9b:3a:28:e4:bc:2a:03

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate new.airliquide.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for new.airliquide.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.vitalaire.com.sa
www.stvmedical.pl
www.lifecleanox.com
www.isenetbiobanking.com
www.airliquide.at
new.airliquide.com
hrconnect.airliquide.us
howtowebsite.airliquide.com
contact.websites.airliquide.com

Other certificates including the domain name airliquide.com

(limited to 100 certificates)
industria.airliquide.it
apacmi.airliquide.com
www.airliquide.com
caps-pprd.airliquide.com
am-api-proxy.apps.airliquide.com
www.airliquide.com
AirLiquide-TokenSigning.apps.airliquide.com
myetelemetry.airliquide.com
www.cryopal.com
new.airliquide.com
connect-as.airliquide.com
datachallenges.airliquide.com
awarenet-AM01-pprd.airliquide.com
ext-procurement.airliquide.com
myinstallations.airliquide.fr
crm-ee.airliquide.com
elogbook.airliquide.com
ext-procurement.airliquide.com
webmail-na.airliquide.com
industrial.airliquide.es
be.airliquide.com
www.cryopal.com
www.airliquide.com
myairliquide.com
deveniractionnaire.airliquide.com
yorc.airliquide.com
hrmds.corp.airliquide.com
mygas-pprd.airliquide.com
www.airliquide.com
ascpprod.am.corp.airliquide.com
www.cryolor.com
fsdev.apps.airliquide.com
bos.iot.airliquide.com
myairliquide.com
www.offral.airliquide.com
cn.vpn.airliquide.com
mygas.airliquide.com
api-ww-dl-dev.apps.airliquide.com
myinstallations.airliquide.fr
adc-al-xendc2.am.corp.airliquide.com
myalt-distributors.airliquide.com
www.airliquide.com
auth.apps.airliquide.com
gideonsuat.airliquide.com
www.airliquide.com
bam.apps.airliquide.com
www.cryopal.com
e-data.airliquide.com
www.airliquide.com
futurereadydatachallenge.airliquide.com
mailhhc-pp.airliquide.com
Fabnet.Airliquide.com
myportal.airliquide.com
di-api-prod.airliquide.com
altacsweb.us.airliquide.com
e-data.airliquide.com
co-lftext-prod.apps.airliquide.com
www.cryopal.com
new.airliquide.com
connect-jp.airliquide.com
1timepass.apps.airliquide.com
gazyspozywcze.airliquide.com
ext-auth-prod.airliquide.com
kite.airliquide.com
www.cryopal.com
yorc.airliquide.com
pdt-prd.apps.airliquide.com
bomgar.apps.airliquide.com
go.airliquide.com
alair.apps.airliquide.com
distributor.airliquide.com
eworkpermit-test.airliquide.com
console-workspace.apps.airliquide.com
mygas.airliquide.com
esafety-test.airliquide.com
pprd-barpluseeuat.airliquide.com
www.airliquide.com
bomgar.apps.airliquide.com
homes-prd.apps.airliquide.com
myinstallations-dev.airliquide.com
mygas.airliquide.com
servitraxca.apps.airliquide.com
svxwebint.apps.airliquide.com
dev.bos.iot.airliquide.com
www.cryopal.com
auth-pprd.apps.airliquide.com
www.airliquide.com
kiosk.airliquide.com
cube-apac.big.airliquide.com
fleet.altomobile-pprd.airliquide.com
www.cryolor.com
sio-optim-bigateway.apps.airliquide.com
1timepass-pprd.apps.airliquide.com
oracleprod.am.corp.airliquide.com
altecstore.airliquide.com
kercomconfig-apac.preprod.bos.iot.airliquide.com
svxweb.apps.airliquide.com
air-liquide-livret2014.com
*.cms-eu-pprd.airliquide.com
de.hseonair-pprd.airliquide.com

Certificate

The complete raw certificate details for new.airliquide.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KWoH6C/EMaS5WZlQCAX
bkwXqjMdVDTfRHcIWFv5A6hsyFfRMlIqoPWklWSrO9oC37IDc0GDhojhu9wMLDYP
8t5Ep2X6gtK4r5X8KbDZ3quFHkPxIy3s+DhNqlQ+8orzkDsy4D3bfONCzltRwmd7
ckprYA1IkTWB2uXrGCkd7ld/4wmdmI8SivJ+i2PhVOr+mSjGNs+iLSbXKtrtoEci
eQGdqOGP6PIEIRfLufVV1/7Zp3cAqooy8gWujTZln0paWPTvA1qJmIC+6uYXw2RZ
73RhRbn9oFFeF1EcF2soY7/+AdIVnNViikhOLra33/fyf7bffQGkd/ousWpq5pYz
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21046605042142176804954987182453735330
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-30 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AIR LIQUIDE SA POUR ETUDE EXPLOIT DES PROCEDES GEORGES CLAUDE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ALIT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'new.airliquide.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27349162252083136808851355174178449090199258242349664338481378006991947437056785808053207700536034548717539387256106880308123993168740417701460267509850960928092997189360084161544866839802546079886429176544168596456185986647612451344480495623439131978606376793903840725620734534177881581841952793624477211210743763633269194404748532498609699427206541370566719533115655620054148796745324266634925521025717560944877061916495553725884246255456875946718109370830455513103701139496520489890348748434385974781750590842395725812386833269628043988614018955307625279813490341147968744862774811357688724757501782167579262333931
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							39c28a91de7d7dd9c495c198368a0e53e4444a6d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (217 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vitalaire.com.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stvmedical.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifecleanox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.isenetbiobanking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airliquide.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.airliquide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrconnect.airliquide.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howtowebsite.airliquide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contact.websites.airliquide.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016924b8a669000004030048304602210086ff07aee0f7392e76798f175e44f11191b435d89ba8ae50d5ccb935d247e4cf022100843f0ef4255c3a290fba10ec65b6c159f0dccd296a9d1a4eb9732941e91e77430076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016924b8a6d00000040300473045022100b27acff5af641f8d4c8c55fa074bbec3492dbc17214c8fceef5032a4cf96011b02204a1e5c6fce068fe0fc770213defbad7d0d366d0fe7e5a12d7f7035f8cb72e03d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a82859446d7f46df84e62c9b65475ef58bd3ffed56711a4ae6dc7ac53a3f72e0149c113b6d7d89619106745d47c8952562007e0e7820811ce2014adcbdcb31b9b009de9a301ae094d269f45f920b848a37f6af0ef51a62a73279ef35d33c4159545af9362a2cc2bf36688b76ae184fd523723a72ccc2eb6e9589107c40286ca79c0948780759473752768da22bccdd115dae844d85516d6944504c287c9a73e5300cd87c126c7bee83fc466517ec16e2225a3c66380c44cffe1d182071b4d74cf84b576b9af42834c01869566120bcb0a3af4af5bd3e6ff5eef4d91dad6388c29626dbc0d9c776af3c9a3b4caa6c5a5d9964c5f859479df3e4b387a648f1f26a