tour.niangf.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2f:34:09:10:2c:b6:72:5d:17:04:62:57:46:db:ab:52:8c was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tour.niangf.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2f:34:09:10:2c:b6:72:5d:17:04:62:57:46:db:ab:52:8c
Serial Number (int): 277399295955078447499479912237456452965004
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cf:81:25:4b:58:53:93:d3:07:96:c6:41:8e:27:2e:2a:5a:03:f3:26
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6a:c0:cc:c6:e1:2c:49:f8:72:76:91:03:26:92:32:98:4d:57:e5:47
Fingerprint (sha256): b1:e5:5f:12:9a:9f:8c:f4:cd:d1:72:4a:34:d9:33:2e:6a:aa:d0:cc:87:99:95:10:d8:2c:2b:d9:34:e6:a3:a5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tour.niangf.com

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tour.niangf.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

accounting.niangf.com
arts.niangf.com
clothes.niangf.com
cosmetics.niangf.com
culinary.niangf.com
dating.niangf.com
gadgets.niangf.com
health.niangf.com
homedecor.niangf.com
homefurnishing.niangf.com
law.niangf.com
medical.niangf.com
pets.niangf.com
sales.niangf.com
tour.niangf.com
weightloss.niangf.com

Other certificates including the domain name niangf.com

(limited to 100 certificates)
accounting.niangf.com
yeezysboost350.us
niangf.com
niangf.com
niangf.com
akrez.us
arts.niangf.com
family.niangf.com
beauty.niangf.com
roueng.com
yoga.niangf.com
arts.niangf.com
arts.niangf.com
sales.niangf.com
niangf.com
law.niangf.com
arts.niangf.com
law.niangf.com
yoga.niangf.com
dating.niangf.com
beauty.niangf.com
law.niangf.com
niangf.com
kuaeng.com
niangf.com
medical.niangf.com
pets.niangf.com
tour.niangf.com
law.niangf.com
law.niangf.com
tour.niangf.com
niangf.com
arts.niangf.com
yoga.niangf.com
jewelry.niangf.com
pets.niangf.com
niangf.com
yoga.niangf.com
pets.niangf.com
sales.niangf.com
beauty.niangf.com
yeezysboost350.us
burberrypurses.us
arts.niangf.com
yoga.niangf.com
sales.niangf.com

Certificate

The complete raw certificate details for tour.niangf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGjTCCBXWgAwIBAgISAy80CRAstnJdFwRiV0bbq1KMMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MTgxMDUzMzlaFw0x
OTA5MTYxMDUzMzlaMBoxGDAWBgNVBAMTD3RvdXIubmlhbmdmLmNvbTCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAJvau6+WWeGe8TqMDg4Opf3OgUfiFaiX
29HuDUOWhmwIuoj0uAEKHOiagEOIw3TcpaWE/I5lhugtOevRygkHl6hDjLJkk/7c
K/cep+H0PKc8LMfAlvkgQvTy4ywuMA4OHqi1ZcQ4nb0LCStZ8VY5/T6mdI7BWBdE
N8jrqEKXpao43cbzMchz3Ougb3B/BlwySt6XAwyrYj+wyjMNEnzM1yMiNkXeqD33
KxAxDYWPRybSOFUw+c0b8DUAlsb27zdSJexrzyHkbLkyPryKtkpw0AwJ4vYpLoU8
HB2hBTQFKHOL5J3pvRFwAkgSInwIc7y70DVnxTWd1G+jU1ejD2Ly7wMCAwEAAaOC
A5swggOXMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUz4ElS1hTk9MHlsZBjicuKloD
8yYwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE
YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnLzCCAU4GA1UdEQSCAUUwggFBghVhY2NvdW50aW5nLm5pYW5nZi5jb22CD2Fy
dHMubmlhbmdmLmNvbYISY2xvdGhlcy5uaWFuZ2YuY29tghRjb3NtZXRpY3Mubmlh
bmdmLmNvbYITY3VsaW5hcnkubmlhbmdmLmNvbYIRZGF0aW5nLm5pYW5nZi5jb22C
EmdhZGdldHMubmlhbmdmLmNvbYIRaGVhbHRoLm5pYW5nZi5jb22CFGhvbWVkZWNv
ci5uaWFuZ2YuY29tghlob21lZnVybmlzaGluZy5uaWFuZ2YuY29tgg5sYXcubmlh
bmdmLmNvbYISbWVkaWNhbC5uaWFuZ2YuY29tgg9wZXRzLm5pYW5nZi5jb22CEHNh
bGVzLm5pYW5nZi5jb22CD3RvdXIubmlhbmdmLmNvbYIVd2VpZ2h0bG9zcy5uaWFu
Z2YuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI
KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHW
eQIEAgSB9gSB8wDxAHYA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4A
AAFram9+WAAABAMARzBFAiB/GKI8rtxAxiy5JA2cziVgOO4OMWmSQXCtOum4W/aH
5AIhAOj+vavfkNBNbYUA/R1NYNu6ZLRe9OPpMSDQXPTz9JPhAHcAKTxRllTIOWW6
qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFram98VwAABAMASDBGAiEA473d6ne4
li/hMoY5sUOl5VRE0oajl+GgSrZ7N3RBzT4CIQCKnkH53ErUDOsobvpxHFY2nyS7
R+oI90Ocg6ascEMJODANBgkqhkiG9w0BAQsFAAOCAQEAh+No7INuW2aver6nnCw/
8GLPlFUSCXxEuCwjbJ8g3Rq4+ZLRH0AgbGTJc66tx2GF/HeUxBopIGJ/8Jklutsg
mydm8VCh6gqO63IFrZGN9TRbStRnsb3DGpf0i2IRQAIzNLVb3+NLH4/Xs/+zSdKz
x7C19gSYG98N//dQZboxMwFmxOrywZuqRX+5Raj11beaU90tNiQ7NfuE6qENtsMY
4nVhoaJgag5K68/ztIIPMNw9aLZljjkmEBnJIvjFGaXNQNQc6QKNb4jHvJKlHR8f
pKI0KN56snhi6eVkUcfhsv6M90zn918n5qIVgYQ4gEKZZTEyXRJmCB8L+Z7XZUdl
zg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9q7r5ZZ4Z7xOowODg6l
/c6BR+IVqJfb0e4NQ5aGbAi6iPS4AQoc6JqAQ4jDdNylpYT8jmWG6C0569HKCQeX
qEOMsmST/twr9x6n4fQ8pzwsx8CW+SBC9PLjLC4wDg4eqLVlxDidvQsJK1nxVjn9
PqZ0jsFYF0Q3yOuoQpelqjjdxvMxyHPc66BvcH8GXDJK3pcDDKtiP7DKMw0SfMzX
IyI2Rd6oPfcrEDENhY9HJtI4VTD5zRvwNQCWxvbvN1Il7GvPIeRsuTI+vIq2SnDQ
DAni9ikuhTwcHaEFNAUoc4vknem9EXACSBIifAhzvLvQNWfFNZ3Ub6NTV6MPYvLv
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277399295955078447499479912237456452965004
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-18 10:53:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-16 10:53:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tour.niangf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19674798605064763791381238393167711803629732176700544942912485473655659049732252686614750254792899731365741364438241642853999373097641693580904426492734791371635981856394927492389187853130238384202365042056628729550642482477172102634019898815553113949337906428696132582423497091543306247406062410905775497694551405121630654150262118079551277668913645464680088605735393006564243955810799475865576274920209038933961662995391110481416762905937972074736836651489171344870306771888025480891896835672198312726048936182966065099019703720524675778439526404213394774950656072776494052159865308667326495008941040371368195190531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf81254b585393d30796c6418e272e2a5a03f326
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (325 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounting.niangf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arts.niangf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clothes.niangf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmetics.niangf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culinary.niangf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dating.niangf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gadgets.niangf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health.niangf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homedecor.niangf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homefurnishing.niangf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'law.niangf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medical.niangf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pets.niangf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.niangf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tour.niangf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weightloss.niangf.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b6a6f7e58000004030047304502207f18a23caedc40c62cb9240d9cce256038ee0e3169924170ad3ae9b85bf687e4022100e8febdabdf90d04d6d8500fd1d4d60dbba64b45ef4e3e93120d05cf4f3f493e1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b6a6f7c570000040300483046022100e3bdddea77b8962fe1328639b143a5e55444d286a397e1a04ab67b377441cd3e0221008a9e41f9dc4ad40ceb286efa711c56369f24bb47ea08f7439c83a6ac70430938
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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