www.honegger.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:65:82:b7:0e:18:69:fa:7e:c6:f7:46:d0:6b:48:47:71:a6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.honegger.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:65:82:b7:0e:18:69:fa:7e:c6:f7:46:d0:6b:48:47:71:a6
Serial Number (int): 295879126969960684794246375110192338006438
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cd:c5:32:a8:aa:86:c8:41:53:d6:e8:5b:0d:6c:eb:50:a1:0a:7f:29
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a7:d1:54:c7:0d:05:0b:c4:fb:ae:e2:69:8c:a4:33:37:17:d1:0b:8b
Fingerprint (sha256): 9e:0a:b8:e0:52:0c:c4:13:78:3b:06:57:dc:8f:91:6c:a2:07:cb:6e:db:ec:72:96:92:7e:2e:16:f8:9a:c3:b7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.honegger.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.honegger.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.honegger.ch

Other certificates including the domain name honegger.ch

(limited to 100 certificates)
honegger.ch
itstatus.honegger.ch
www.honegger.ch
owa.honegger.ch
honegger.ch
itstatus.honegger.ch
honegger.ch
honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
www.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
www.honegger.ch
www.honegger.ch
honegger.ch
honegger.ch
www.honegger.ch
www.honegger.ch
www.honegger.ch
www.honegger.ch
www.honegger.ch
itstatus.honegger.ch
citrix.honegger.ch
www.honegger.ch
*.honegger.ch
itstatus.honegger.ch
honegger.ch
owa.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
www.honegger.ch
honegger.ch
itstatus.honegger.ch
honegger.ch
honegger.ch
itstatus.honegger.ch
*.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
honegger.ch
honegger.ch
honegger.ch
www.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
www.honegger.ch
itstatus.honegger.ch
www.honegger.ch
itstatus.honegger.ch
honegger.ch
www.honegger.ch
honegger.ch
www.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
www.honegger.ch
honegger.ch
itstatus.honegger.ch
honegger.ch
owa.honegger.ch
itstatus.honegger.ch
www.honegger.ch
itstatus.honegger.ch
honegger.ch
honegger.ch
honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
honegger.ch
www.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
*.honegger.ch
itstatus.honegger.ch
go.honegger.ch
honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
itstatus.honegger.ch
www.honegger.ch

Certificate

The complete raw certificate details for www.honegger.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgISA2WCtw4Yafp+xvdG0GtIR3GmMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODExMDExMDI5MjRaFw0x
OTAxMzAxMDI5MjRaMBoxGDAWBgNVBAMTD3d3dy5ob25lZ2dlci5jaDCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBALZ2GVEkQtQZCCLnyj0Ev6TgZbNhRVlE
Fmp1seVSj4xiXC207etQD650ZaWLsfT28A1Wpsiy3VgRVdkJKbXig5C39T0h5ORR
Ufgqh/toCqTnPQqyJEiL2Vd7inBE5UhY/+XuERwc5DjbG+cdup9x6YgKUys7Z9eC
78L4AHYlbeoEg7cA/f2PAvchF9TCys5OKSWiGsowAI5s2Cebf+FZJHmfEEShcN/c
zqog1ycNvvjaQPEHFF5tH1bBoIqEGa4NQbrRBXgNC/4GF3xrurvCDoIh6V0uBZxY
vcN3aFQNhXAVgScWj0Hyio3Y24zMxoasP1dVChzfer0sNtWEvJPbybDw3yDaNs8n
XTVBWoxIWR0ThBSPv/0xjiyCEt8Fda4LtKieZr9tyioyK9qi+rJe9c+fp0cUFdCI
ScrYSD8Tv+OmExiAQuVPMnbN8QAhJ4pv+d8hCdv2HO6t7wWInStxNGhmpWnwMmT3
H9ykcwW+cYEcdiHpoRtbU4g9BiiXo3YR2wFrOvt6HOhCRGUxAxuSCt5QeecdJLWP
7n6i3xscfDNvMvU+Q74EZ51jCX/n5BzNdW2DeQjqrJ3AzNlpj00929UP/7ei9/v/
/WA+8SikGRfAWSy/y1tXse6rsGuPNnvzPlXTxstQv+ioZSCnmdT/10MV3CWX0Zr/
cIVPlMnsThSXAgMBAAGjggMYMIIDFDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFM3F
MqiqhshBU9boWw1s61ChCn8pMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPd3d3LmhvbmVnZ2VyLmNo
MIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggr
BgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwIC
MIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBi
eSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRo
ZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlw
dC5vcmcvcmVwb3NpdG9yeS8wggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgDiaUuu
JujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAWbPCPxQAAAEAwBHMEUCIQD6
2enoD/aYMk2+YizAFT+kqAfAN50dbWS6F5d/gkZCiQIgXP8/ToC02fb1SJ4lYsA0
5JVESaoO8cNHgeeiea5lESwAdwApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTl
RUf0eAAAAWbPCP5YAAAEAwBIMEYCIQDcI2Bw5Nt2SWZ6cVnJL0TZFL6j8+jPW/OJ
0jiz9MBfngIhAKE5LLg41Z1pLCqgEbEpsfNvRbNKwbLMNu4teJXyZ+pRMA0GCSqG
SIb3DQEBCwUAA4IBAQAArg6cEDVOyoObCJ9HXxWqexGMeOiCpUBlaAfJv0H63Awn
BKdufHHyxqDcXwAG0jCguFFOkG2fPWd127Cierbro5WQ7lTBd0vSX8irBRQ//hg7
6wnOFgLRJ9dJfR6ApUwGUcQ4cg9gJrzGI166hkmSJ7RfkA2rSWpqAsDrEzrOX1rY
npvNDD2/gSN3fCRYgKgcmRgjudUtmH9L7zvBB3uBNQDRNiwkanNB3xE6c4rY2s3o
C3M7+vBOq0HKzSPeFQGFnit7eZP83AZboJwrdDwq5bHM731qDPd+iFLlzVml9Rd8
vNYrUvLR9poskHAHALpZbD9MSarFhQMdGNPeB5Zy
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295879126969960684794246375110192338006438
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-01 10:29:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-30 10:29:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.honegger.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 744377257308840954727301927755205211761422889973222854456812301288326727035988231945888306743845128748833394112091653560163190689169133869082063917567835768309833468235911286408485198841735684390289553485979788839069393003178077785917399036455048290101676509114635872960393405160556002334083332802458743366216537604170115914066060490762249416153294177963032611439347436425640579670962168435153104701285091517619946242148477599029123606387239901390994585184469448424252102745393956981323694068350311402422234471296231666601620540201374588980710861344718730000951630898481397375392116507911541407079904395957742497798098169809541464430765417833199055178855045589854249963364992538797699224668356900541747671216023638879644634866684350943348309052402990054653750728503977168347043358301175727656276718263946002998937585251089129588729719549998036787848495767337215852771513730156383265648027006685270491719955468042591634764895178639701865548014803337061185201218063583373509897051105221235541889161262399773890599116283795657631972043896953316642128601768593850005766655123531837811876256468499964182592193332885659664260730760353161264625148292192395862453357004570936148339137125739205919308341934387773306485707591275311406911460503
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cdc532a8aa86c84153d6e85b0d6ceb50a10a7f29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.honegger.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000166cf08fc500000040300473045022100fad9e9e80ff698324dbe622cc0153fa4a807c0379d1d6d64ba17977f8246428902205cff3f4e80b4d9f6f5489e2562c034e4954449aa0ef1c34781e7a279ae65112c007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166cf08fe580000040300483046022100dc236070e4db7649667a7159c92f44d914bea3f3e8cf5bf389d238b3f4c05f9e022100a1392cb838d59d692c2aa011b129b1f36f45b34ac1b2cc36ee2d7895f267ea51
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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