www.mysporty.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 03:4f:90:ee:1a:7e:f9:ac:98:30:82:c5:51:da:0d:5d:50:b3 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.mysporty.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4f:90:ee:1a:7e:f9:ac:98:30:82:c5:51:da:0d:5d:50:b3
Serial Number (int): 288411809917482906321273829306776432758963
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 54:e2:24:db:8b:67:f5:8c:cf:12:a3:36:79:bf:98:47:4f:e9:93:c4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ee:9d:0a:d0:9b:3c:ab:bf:ef:75:0a:5f:e9:7f:63:fb:58:fd:6a:e9
Fingerprint (sha256): c6:7f:a3:40:34:dc:12:75:b0:9c:06:bb:17:6f:fc:88:84:d9:22:65:26:b1:de:ed:ba:89:32:fc:3f:32:6b:4f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.mysporty.co.nz

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mysporty.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

swim.diocesan.school.nz
www.aucklandcricket.co.nz
www.auroracollege.school.nz
www.belfastbowlingclub.co.nz
www.bmxnewzealand.co.nz
www.bmxnewzealand.com
www.bmxnz.com
www.bmxnz.nz
www.canterburypickleball.org.nz
www.charterisbayyachtclub.co.nz
www.christchurchpark.co.nz
www.cwa.org.nz
www.dunedinicestadium.co.nz
www.eastcitybmx.com
www.ellersliecricket.co.nz
www.flyingnz.co.nz
www.glenfieldrugby.co.nz
www.hadlow.school.nz
www.hbspeedwayclubinc.co.nz
www.houhorafishingclub.co.nz
www.jcc.org.nz
www.kaiauaboatingclub.nz
www.karoricricket.co.nz
www.manawaturugby.co.nz
www.maori.basketball
www.mauao.school.nz
www.morrinsvillebowlingclub.co.nz
www.msfc.org.nz
www.mxt.co.nz
www.mysporty.co.nz
www.navalpoint.co.nz
www.newlandsprimary.school.nz
www.npsuc.co.nz
www.npsuc.org.nz
www.paraparaumucollege.school.nz
www.pihaslsc.com
www.pnghs.school.nz
www.rookiesox.co.nz
www.rosebank.school.nz
www.secondtononebasketball.co.nz
www.shsinv.school.nz
www.softballfoundationnz.org.nz
www.sportsafe.co.nz
www.stampede.nz
www.stream.school.nz
www.teawamutunetball.co.nz
www.tewaipounamutouch.co.nz
www.touchnzinternational.co.nz
www.touchnzinternational.nz
www.volleyballotago.nz
www.whanganuirugby.co.nz

Other certificates including the domain name mysporty.co.nz

(limited to 100 certificates)
www.mysporty.co.nz
www.mysporty.co.nz
www.mysporty.co.nz
www.mysporty.co.nz
www.mysporty.co.nz
www.mysporty.co.nz
www.mysporty.co.nz
www.mysporty.co.nz
www.mysporty.co.nz
www.mysporty.co.nz
www.mysporty.co.nz
www.mysporty.co.nz
www.mysporty.co.nz
www.mysporty.co.nz

Certificate

The complete raw certificate details for www.mysporty.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7rA0fo/1bYkOxE4b0Kov
zFCpoKSDqVVC3peZ5gxwgKiZmOVQZi3A+9aygzUd+RGLlHy33Ds23Ls7NOKMlykP
OG38am3LCVRA+SV7uK+cSKQS8qCmdhJ+6UdGYGYeS3l7PLuQmSLlw/K+Lkh7G4hN
2BMThntZ/L5tHWauSsaTS1nlGa2hQH5LCFsPKUulXmvko+c8kDj3iVVeEbRqqp3o
5WXa0BbIyOKtNdzg9K4Zmb0lygrfmqFLWAj1JLgmF0izHKBrGglOT1B4beZND5nm
i/ZX+L7ewV5xIJVaFPkkat0pr8wLTOoZZGPrTiI4d0Sjk6O9lEGYjAZvLMe9lySD
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288411809917482906321273829306776432758963
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-07 20:57:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-06 20:57:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mysporty.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30131606533561115873576975357515863957759519868391212680117185423274221214079267161338154045919394381932034045031863494275234473163199388849971922476407076028038672159990165417803527213183429997498037410950453227240310192517268231357470741947330389354996229992150755744591554774722932792456372012390002937585067817550517171800463115612700843419251378100651993733798705480593800034542919440250594877608680782730847334927725116277244505489099697973740747919185603815253863918996499243045789479827308909854188798930604000839940961050803747993535732274396084188781075432361604846279049148448438391388592019938506250159021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							54e224db8b67f58ccf12a33679bf98474fe993c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1252 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swim.diocesan.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auroracollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belfastbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmxnewzealand.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmxnewzealand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmxnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmxnz.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburypickleball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charterisbayyachtclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchpark.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cwa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dunedinicestadium.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastcitybmx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ellersliecricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flyingnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenfieldrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hadlow.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbspeedwayclubinc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.houhorafishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaiauaboatingclub.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karoricricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manawaturugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maori.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mauao.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morrinsvillebowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mxt.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysporty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.navalpoint.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newlandsprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.npsuc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.npsuc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paraparaumucollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pihaslsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pnghs.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rookiesox.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosebank.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secondtononebasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shsinv.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.softballfoundationnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsafe.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stampede.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stream.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teawamutunetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tewaipounamutouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchnzinternational.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchnzinternational.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volleyballotago.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whanganuirugby.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ce5ede87e000004030046304402201ece7acf02738bb4dbae107e85fd97ca0a1f1ea02c6ca83e4f3add16138efecc0220635d2adff246a59159f1be8ece9ca064dd7a969f5212698dd8de59849f9223e3007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ce5ede8e4000004030047304502207f0b2d820bb67dbdbd2ed13e8e26eb947939413818e3ae87e3b9291eec4cb0eb0221009b6e7e63250a6a989b1eb17582eafdd1568ff9b017ef09993f52cfebf00b7e71
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005748e297850505ffc191887ecaf5514285a570ad65324734d413d9bc1e9718f6b438f857e2970d8971df6d2d1afb5c58fb931285fe7e013cce52bf877e7b81de73426aa38ea7933cde6f448d107378c88c11dafbaec42900281bcae4277752c475f466428a5f026ae31afc5d5d3a9b5aa885d8a8f10f4ba829509c6965dcb5083beb9aec1179145294172943ed1134e2c4b9618494c20d47ee892ab138e739e879cb8f36f74d131f7f925d6a3e57449369723c361b8b489aaa66657cb8790bff54b8ce4943301fc35c6a6b6d88515e9a9bb2d414ba85e4d40b7ebad5246ea9e09fd7de43a8ba031e05e5fa957b95fb7477c5c994a1db95220e125314dd142db9