fundexapp.jp

Issued by Starfield Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number d4:b7:98:f9:b7:53:08:56 was issued on by Starfield Technologies, Inc..

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fundexapp.jp,OU=Domain Control Validated

Starfield Technologies, Inc.

Organization: Starfield Technologies, Inc.
Organization unit: http://certs.starfieldtech.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): d4:b7:98:f9:b7:53:08:56
Serial Number (int): 15327888055068723286
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 73:64:e0:50:c7:16:eb:8e:8b:2c:18:ef:e8:3e:aa:64:f3:f1:43:c6
AuthorityKeyId: 25:45:81:68:50:26:38:3d:3b:2d:2c:be:cd:6a:d9:b6:3d:b3:66:63

Fingerprint (sha1): 6b:5e:83:d4:44:04:f1:9c:52:00:b9:a6:4c:f1:2b:de:82:66:6e:17
Fingerprint (sha256): b0:eb:b1:20:92:af:7c:8c:25:c8:ce:77:4f:72:22:03:0a:04:09:bb:99:6b:a6:d6:d1:86:50:61:ec:1e:ee:84

Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sfig2.crt

Revocation information

OCSP Server: http://ocsp.starfieldtech.com/
CRL Distribution Point: http://crl.starfieldtech.com/sfig2s1-149.crl

Check the revocation status for certificate fundexapp.jp

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fundexapp.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fundexapp.jp
www.fundexapp.jp
kifuform.oby-sacred-heart.ed.jp
kifupayment.reitaku.jp
kifu-form.kokugakuin.ac.jp
ask.alumni.kyoto-u.ac.jp
payment.kikin.jim.u-ryukyu.ac.jp
payment.kikin.kyoto-u.ac.jp
debug.fundexapp.jp
donation.riken.jp
kikin.shinshu-u.ac.jp
ext-form.sec.tsukuba.ac.jp
admin2.fundexapp.jp
eng.futureship.sec.tsukuba.ac.jp
cms.fundexapp.jp
donation.kogakuin.ac.jp
kifu-form.waseda.jp
kifu-form.ynu.jp
kifu.toyo.ac.jp
ynu-magajin.ynu.jp
kikin.nagasaki-cvs.com
giving-form.sec.tsukuba.ac.jp
kifu-form.toyo.ac.jp
jrfu-kifu.rugby-japan.or.jp
gpay.fundexapp.jp
koyukai.shinshu-u.ac.jp
futureship.sec.tsukuba.ac.jp
admin.fundexapp.jp

Other certificates including the domain name fundexapp.jp

(limited to 100 certificates)

Certificate

The complete raw certificate details for fundexapp.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFqtdmXuwg90jD2ivZED
qUqOJMVHiDiaLdxMcy83VbBmRCUC+UW7aj1BffK6pKqD7MAOOt5oHHWxVxKTKx+r
Ya0r8huaj+Me/4tgZ5KFxlJ3yMq29p73Gvuaip9Zn5MDTiybKkhQ0MzUtlFVkJht
NVH0SIHby7Lzoa0kg+I5wWq/4Yd3iYlkUY4BI5GpHbj90XyfEyhQHg1zG5hybVyo
bB/5Z+MeqdZARXWxWnpEmXD9iMLc1nV82Mzc49yhVc83FvMNa0Z1P0b5GWqtNl/i
8tVuz7RvTNF/rGyQoBpo3Qh2bfDbosAqiqXH6vD/DK+uO8cdCN5tv9ITMp7CNaV0
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15327888055068723286
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.starfieldtech.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-18 07:39:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-09 03:10:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fundexapp.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20747796799551609245149515212478235510071654815295524954726857208297806734541032953953309454505903022692679592391564020290534187350308290908533172834625975984308650720350414155288661583972993016980846384321416673154326031410209127557240233365899909388238580363495812973639552033724133870211748965109844991606365778877496425359931566738087223036076720790708329004835963383042384834241302234180534823538123675984964457136518118887176578212340545008473214382072230699650844737234715632474965055210015700462724605694941132425411834300773543030056156167644391915923529354837867398969412870154189449644490559405379671127067
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfig2s1-149.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sfig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 254581685026383d3b2d2cbecd6ad9b63db36663
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (674 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundexapp.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fundexapp.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kifuform.oby-sacred-heart.ed.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kifupayment.reitaku.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kifu-form.kokugakuin.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ask.alumni.kyoto-u.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.kikin.jim.u-ryukyu.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.kikin.kyoto-u.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'debug.fundexapp.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donation.riken.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kikin.shinshu-u.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ext-form.sec.tsukuba.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin2.fundexapp.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eng.futureship.sec.tsukuba.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.fundexapp.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donation.kogakuin.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kifu-form.waseda.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kifu-form.ynu.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kifu.toyo.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ynu-magajin.ynu.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kikin.nagasaki-cvs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giving-form.sec.tsukuba.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kifu-form.toyo.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jrfu-kifu.rugby-japan.or.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpay.fundexapp.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koyukai.shinshu-u.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futureship.sec.tsukuba.ac.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fundexapp.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7364e050c716eb8e8b2c18efe83eaa64f3f143c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016b6987284e0000040300473045022100ee263a1c20fc46a7cd31e558f905fb38e014d13b612e653871556cc7cf957cbf02204da617651336d36f3d0e9e91daa63013954543a4c84f4fb5c3c40da11bcb8a53007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b69872df60000040300473045022100b595f4a36c70dceaea18340bcc0328e91cad8715f81e8b0b7fb201e3a1c1e8da02202ab07bb3601200062c3a0d1689fd709f1c300986fe99b8a4a720a400a477c540
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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