chrisingram.guru

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:21:08:40:68:5a:9b:58:75:a1:71:ee:00:2b:47:ad:e4:72 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=chrisingram.guru

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:21:08:40:68:5a:9b:58:75:a1:71:ee:00:2b:47:ad:e4:72
Serial Number (int): 272577144151186145313661479799018811679858
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ae:36:fe:93:19:c5:85:a8:e4:b6:ad:0a:36:26:2c:02:64:7c:3b:59
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 43:6d:ea:b2:e3:05:ab:d1:a0:96:f7:a8:39:3f:67:28:7a:ba:16:e7
Fingerprint (sha256): b5:f1:b1:46:1a:77:66:b4:b8:ab:a2:05:26:e0:4a:0f:b7:32:90:56:93:b6:2c:b7:73:00:48:86:aa:ee:e8:db

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate chrisingram.guru

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chrisingram.guru

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.chrisingram.guru
autodiscover.terran.company
chrisingram-guru.okdata.com
chrisingram.guru
cpanel.chrisingram.guru
cpanel.terran.company
mail.chrisingram.guru
mail.terran.company
terran-company.okdata.com
terran.company
webdisk.chrisingram.guru
webdisk.terran.company
webmail.chrisingram.guru
webmail.terran.company
www.chrisingram-guru.okdata.com
www.chrisingram.guru
www.terran-company.okdata.com
www.terran.company

Other certificates including the domain name chrisingram.guru

(limited to 100 certificates)
chrisingram.guru
mhprice.com
mccysorg.okdata.com
mersonoffice.okdata.com
terranco.com
terranco.com
chrisingram.guru
chrisingram.guru
sruinc.org
quantum.church
mhprice.com

Certificate

The complete raw certificate details for chrisingram.guru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHCzCCBfOgAwIBAgISAyEIQGham1h1oXHuACtHreRyMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMjEwNjMyNTBaFw0y
MDA1MjEwNjMyNTBaMBsxGTAXBgNVBAMTEGNocmlzaW5ncmFtLmd1cnUwggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClGhVH63ImqEcSVoW2Jkn0VJ7XtXWc
Mr3ujN1/9gDyjH9pSib4liUAydZnJzt7incR9AeHTznio9UMhbNDeyjw76I+PCON
4SBiyvh7WgbHHYvzYfTKwIo3u+dmG4Ho+Wztx3WCGmQm2nTOpZ9QmNIEH/6OtCIr
Hys0BOoLR+TknUzSki0n4Z8cVINl0us7C3jKjflZ23eMIkQCSOmDXOz1Id8ErWHE
v5NguNVK+HbNFeA5gR6gwAq3MNU8QRY7JfGPMd4m5xgE7vahkn6wl1gM49MoBDMj
xZh0V5rC7TRZ3KAgpiM+102n1MAebYjYgdkp4g6DRS+yN/WnfIYmWKkjAgMBAAGj
ggQYMIIEFDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFK42/pMZxYWo5LatCjYmLAJk
fDtZMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEB
BGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0
Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0
Lm9yZy8wggHNBgNVHREEggHEMIIBwIIdYXV0b2Rpc2NvdmVyLmNocmlzaW5ncmFt
Lmd1cnWCG2F1dG9kaXNjb3Zlci50ZXJyYW4uY29tcGFueYIbY2hyaXNpbmdyYW0t
Z3VydS5va2RhdGEuY29tghBjaHJpc2luZ3JhbS5ndXJ1ghdjcGFuZWwuY2hyaXNp
bmdyYW0uZ3VydYIVY3BhbmVsLnRlcnJhbi5jb21wYW55ghVtYWlsLmNocmlzaW5n
cmFtLmd1cnWCE21haWwudGVycmFuLmNvbXBhbnmCGXRlcnJhbi1jb21wYW55Lm9r
ZGF0YS5jb22CDnRlcnJhbi5jb21wYW55ghh3ZWJkaXNrLmNocmlzaW5ncmFtLmd1
cnWCFndlYmRpc2sudGVycmFuLmNvbXBhbnmCGHdlYm1haWwuY2hyaXNpbmdyYW0u
Z3VydYIWd2VibWFpbC50ZXJyYW4uY29tcGFueYIfd3d3LmNocmlzaW5ncmFtLWd1
cnUub2tkYXRhLmNvbYIUd3d3LmNocmlzaW5ncmFtLmd1cnWCHXd3dy50ZXJyYW4t
Y29tcGFueS5va2RhdGEuY29tghJ3d3cudGVycmFuLmNvbXBhbnkwTAYDVR0gBEUw
QzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDov
L2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgDn
EvKwN34aYvuOyQxhhPHqezfLVh0RJlvz4PNL8kFUbgAAAXBmqdQRAAAEAwBHMEUC
IQCgSiIOxiJ036vmcJF3JGEandMm3qKC6iGMr/Nn4qo9VwIgE3SMf3HhJ2w+I4OE
s5WCGV84ublWsVtDVRxzEvpvZIcAdQAHt1wb5X1o//Gwxh0jFce65ld8V5S3au68
YToaadOiHAAAAXBmqdRBAAAEAwBGMEQCIA+lUzWDUPmz5xp+7jecjAOGOICmDM7W
PsxGUlunoJ0LAiAjQUCsruDLKlDSPW+vicxC79X39yq+Wx3BpDLlioFJ+TANBgkq
hkiG9w0BAQsFAAOCAQEAkkrEQtQ8+/4kxpE9RXgOK8xLQDi0mZeEYf8bZhruqGZh
Ddbzj9EHJZ9AeCEWplbh+gj9zSQR2ERwUnz4od+3p/DTKNlLF6UJeuZEo1iOr5oX
wtOtoFMC5/SYm54Qkz6m0oezAyt70f3XsUFDwcDzvUKFqpoEMbp/uyjoM2M1rEDt
0aZfXpjXKbnkOdJ5rlMOKC0IPZiaKlV7Bo7qcp4kAXDdwjxjFBMG/jdm4+6NJMMM
68Zsoc4cF603s6516GrBLLjD4SZJlnqBz+VWaGvQODpDs6jjJ1IAA7q+bdnghMz0
sDd35s33zM3W4n1PcE4dgTkWXgNazMotTA7pFZoE0Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRoVR+tyJqhHElaFtiZJ
9FSe17V1nDK97ozdf/YA8ox/aUom+JYlAMnWZyc7e4p3EfQHh0854qPVDIWzQ3so
8O+iPjwjjeEgYsr4e1oGxx2L82H0ysCKN7vnZhuB6Pls7cd1ghpkJtp0zqWfUJjS
BB/+jrQiKx8rNATqC0fk5J1M0pItJ+GfHFSDZdLrOwt4yo35Wdt3jCJEAkjpg1zs
9SHfBK1hxL+TYLjVSvh2zRXgOYEeoMAKtzDVPEEWOyXxjzHeJucYBO72oZJ+sJdY
DOPTKAQzI8WYdFeawu00WdygIKYjPtdNp9TAHm2I2IHZKeIOg0Uvsjf1p3yGJlip
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272577144151186145313661479799018811679858
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-21 06:32:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-21 06:32:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chrisingram.guru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20842182389516699113514744291359095638418453651389865604762793066230376600396295459009150397757413974177130921021952341328836810758206023794910082289746423058901750116977948494837583834933203792551948663060146924533852959977372254121268437213380691808773832482119996984401424565600308505667696022296406064758917661198066928775967148291079761710237211262740201457045845723248547267103757110171366011567158396829495951427342659010386366305588444359917015135457420932701849668922036541607111047700970771481152002253329063682746300912247752781404890542018583509225300636551860011921575923514676971621562349383197872662819
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ae36fe9319c585a8e4b6ad0a36262c02647c3b59
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (452 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.chrisingram.guru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.terran.company'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chrisingram-guru.okdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chrisingram.guru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.chrisingram.guru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.terran.company'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.chrisingram.guru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.terran.company'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terran-company.okdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terran.company'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.chrisingram.guru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.terran.company'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.chrisingram.guru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.terran.company'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chrisingram-guru.okdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chrisingram.guru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terran-company.okdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terran.company'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e0000017066a9d4110000040300473045022100a04a220ec62274dfabe670917724611a9dd326dea282ea218caff367e2aa3d57022013748c7f71e1276c3e238384b39582195f38b9b956b15b43551c7312fa6f648700750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017066a9d441000004030046304402200fa553358350f9b3e71a7eee379c8c03863880a60cced63ecc46525ba7a09d0b0220234140acaee0cb2a50d23d6faf89cc42efd5f7f72abe5b1dc1a432e58a8149f9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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