aeg-xs06-prod.trafficmanager.net

Issued by R3

About this certificate

This digital certificate with serial number 03:05:c3:6b:b0:74:24:93:d0:ed:ec:fa:93:34:90:0d:f8:27 was issued on by Let's Encrypt.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=aeg-xs06-prod.trafficmanager.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:05:c3:6b:b0:74:24:93:d0:ed:ec:fa:93:34:90:0d:f8:27
Serial Number (int): 263298028243733231332399959138295280957479
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 57:66:4a:85:87:dd:90:c2:4e:4c:82:a2:fb:7c:93:bb:46:8a:2a:22
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ac:82:5c:18:ed:f2:7e:83:96:59:9e:7d:73:7c:e3:a7:36:7a:19:f5
Fingerprint (sha256): ce:85:93:7a:3e:8c:e9:07:9a:19:38:10:dc:5a:2e:ac:52:dd:20:b4:7b:c1:87:21:37:ad:c4:49:fd:16:09:14

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aeg-xs06-prod.trafficmanager.net

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aeg-xs06-prod.trafficmanager.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aeg-xs06-prod.trafficmanager.net
aeg-xs06.us-central1.gce.aegp.cloud
aeg-xs06.us-west1.gce.aegp.cloud
atlanta.resetconcertseries.com
bayarea.resetconcertseries.com
boston.resetconcertseries.com
chicago.resetconcertseries.com
columbus.resetconcertseries.com
dallas.resetconcertseries.com
dc.resetconcertseries.com
dmv.resetconcertseries.com
losangeles.resetconcertseries.com
nashville.resetconcertseries.com
neworleans.resetconcertseries.com
newyork.resetconcertseries.com
rockymountains.aegpresents.com
sandiego.resetconcertseries.com

Other certificates including the domain name trafficmanager.net

(limited to 100 certificates)
*.prod.execution.cscp.ms
edu-datasenseeds-ppe.trafficmanager.net
southcentralus-a.ambackend-ms-int.trafficmanager.net
emea.bvd.services.skypeforbusiness.com
testservice4-test-wp.trafficmanager.net
sfmc-northeurope-a.ambackend-ms-int.trafficmanager.net
srbtest4.cloudapp.net
switzerlandnorth-a.ambackend.trafficmanager.net
remoterendering.pmetest.mixedreality.azure.com
netmontest.cloudapp.net
dgrepv2-frontend-ppe.trafficmanager.net
awasappe-ase.cloudapp.net
msggw.services.skypeforbusiness.com
azdevscholarshiptm.trafficmanager.net
fyffest.com
aobo.na01.prv.sitops-preview.trafficmanager.net
germanywestcentral-a.ambackend.trafficmanager.net
centralus-a.ambackend.trafficmanager.net
CHI21PrdApp01.prod.idns.azure.net
*.falconprod-sf.trafficmanager.net
sfmc-eastus-a.alertsregional-ms-ppe.trafficmanager.net
vscode-update.trafficmanager.net
threatintel-stg.trafficmanager.net
ame.ks.immersivereader.api.cognitive.trafficmanager.net
southafricanorth-a.ambackend.trafficmanager.net
australiaeast-a.ambackend.trafficmanager.net
netgraph.osdinfra.net
presence.teams.microsoft.com
CBZ07PrdApp01.prod.idns.azure.net
deinsights.trafficmanager.net
epg-empower.trafficmanager.net
luis-australia-southeast-textanalytics-1.trafficmanager.net
preview.int2.microsoftatlanta-int.com
flightservice.trafficmanager.net
edu-datasenseeds-ppe-westus2-https.cloudapp.azure.com
southcentralus-a.ambackend-int.trafficmanager.net
msaaslocale.support.microsoft.com
eastasia-a.ambackend.trafficmanager.net
govtrafficprod.trafficmanager.net
03-weu.emea.prd.api.mediapaas.teams.microsoft.com
MA1PrdApp03.prod.idns.azure.net
enrollment.pi.dps.microsoft.com
aikcm-prod-dewc01.cloudapp.net
DAS-SeverSSL-201703.opinsights.azure.com
beta-rma.trafficmanager.net
oikcm-prod-eus2perf.cloudapp.net
graphstoreapi-eus.trafficmanager.net
gogomall.trafficmanager.net
dsreporting.corp.microsoft.com
SCA-SSL201712EUS.azure.com
khalid.asia.aegpresents.com
edssfdev.trafficmanager.net
os-oi-das.LAControlPlane.trafficmanager.net
*.ariaapps.dev.trafficmanager.net
prd.audience.teams.trafficmanager.net
noamdf.bvd.services.skypeforbusiness.com
prod-mwaas-services-partner-ui.trafficmanager.net
DUB07PrdApp01.prod.idns.azure.net
saspo10030serim.trafficmanager.net
an-ocp-func-imitationrequest-tm-acc.trafficmanager.net
ASCEscalationTrafficManagerppe.trafficmanager.net
CBN07PrdApp01.prod.idns.azure.net
www.startinglinerock.com
hotsara.trafficmanager.net
adminv2.ea.azure.com
CQ1PrdApp02.prod.idns.azure.net
eastus-a.ambackend-int.trafficmanager.net
lsascheduler-prod-noe.cloudapp.net
prd.audience.teams.trafficmanager.net
gdcomessengertest.trafficmanager.net
mbprod-media.trafficmanager.net
CyberDataPrefetcher-PRD.trafficmanager.net
001-jpwe.apac.prd.api.cos.mediapaas.infra.teams.microsoft.com
dgrepv2-frontend-ppe.trafficmanager.net
mscm.microsoft.com
02-eus.noam.ucap.ivr.mediapaas.teams.microsoft.com
2019.fireflyfestival.com
sfmc-westcentralus-01-sbs-a.ampss.trafficmanager.net
aedservice.cloudapp.net
frontend2.ma.prod.idns.azure.net
*.search.ppe.us.trafficmanager.net
eastasia-b.ambackend.trafficmanager.net
*.westus2.cloudapp.azure.com
binggallery.trafficmanager.net
dog.audience.teams.trafficmanager.net
geneva.global.dcat.trafficmanager.net
mrp-int7.trafficmanager.net
df.mupublishing.redmond.corp.microsoft.com
test.iotmodels.trafficmanager.net
opportunity-int.pi.trafficmanager.net
OMS-ServerSSL201812cq.azure.com
boweryevents.com
apac.bvd.services.skypeforbusiness.com
emailinterchange-test.trafficmanager.net
acs-norwayeast.trafficmanager.net
aeg-ss13-prod.trafficmanager.net
francecentral.prod.api.medeina.trafficmanager.net
live.applicationinsights.azure.com
edu-bootstrap-ppe.trafficmanager.net
ti.securitycenter.windows.com

Certificate

The complete raw certificate details for aeg-xs06-prod.trafficmanager.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsq/fR7B1gJIGZnE0pDbn
uYngoB+GIM/HigM87eh78oSQehA8ePOpYmOFsqN7lD1NWXkCPEOmayL09aHVtLB6
BqzyCSM7F8D0qOQ/VQGmrq8p28MuHNmyTqRRUV55f7Hqo6EWnjWDvi6wxk8/mu+u
gFcUzik1lCt9LwenG8vaZZ5L4y8BHMJuz5U2qAh+P6dkkABzw1YLAA5mDswXDf7I
LhAUh4/xUCRj0kmkzqeXvHL7C4L+LrU/Xf5Qx4ueTn8H1cEZnMnI4aXVPsBvC1Sw
V3Ij21OV7mma02zkC3KkMUxX7j0I9BQ/p8/nO28gN/WXFhjXt47Q58kKbr61gT2R
7wBPTOrtWM9FVJV5PAK1aBsBNxAyWauE6GA/Pz90gCF1H7slUTp8XRhr32sfvDRY
xThw9CyY7qeeZTdjph22OWnWorcM4oSmFwvLloYe/1YSsrWNoYrudOHwL/SjEPO8
cN7qBgIS9ptEhzTvt2aLSm4IzP7Q3AJo7eCKXgnK8rrYzalvEGP1uHsCCVRc5wmK
NPUUD15Bin8NIR158ccIKtRIaEvaTJT3PEj9pVMixUzquezHXisZfeaorFO8/XGy
5OH2BPrVGRgK1LtHN1na/vGQDzmok1YzjydijH8uZZlSfCYJbNCDWoVyyPWzdkzh
F8+8I0r4NSjMromsFm4SjNMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263298028243733231332399959138295280957479
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-18 13:41:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-17 13:41:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aeg-xs06-prod.trafficmanager.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 728979362572592712182476331237406122336987070578756613786394779067363428293303271386207839423285045474387895154932754506661048257883897214355870212928783067879731612168119486753075983587050969651035057763933310269379002230574556498825132644605374015731400168345333363402404523508241473889518527421742465804675930802681663963372769212803666521921091676830827516660363807768944414482626565604943872395887895248780835793251164420874401404945303202273318861125710665993173611368506419148577658995441940766364699553003452440131820570055447437167438729150197859415726179904232170692936909082306402870039845000526204017769661615473417091593903798485958619201867520098523677154420574143364074702102177655599224957713733192306824173137784312577638198500441968708471570044203308603729930731179527019707698539420793402764796894897798805057049778072059510932181648403726189616777958892454830850707788228413835313488392489594734705055894149514782036134023099859492379577838703246057484416886045884668448490355308471321555566375174654229656706144769055850588470930163194378522619167560784988118178358138791066075487817697210415681732718212447690962730584767575667596430718328209854798400836254761338003477772006600735829730403178380473321972206803
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							57664a8587dd90c24e4c82a2fb7c93bb468a2a22
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (556 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeg-xs06-prod.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeg-xs06.us-central1.gce.aegp.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeg-xs06.us-west1.gce.aegp.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlanta.resetconcertseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayarea.resetconcertseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boston.resetconcertseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicago.resetconcertseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'columbus.resetconcertseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dallas.resetconcertseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc.resetconcertseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmv.resetconcertseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losangeles.resetconcertseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nashville.resetconcertseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neworleans.resetconcertseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newyork.resetconcertseries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockymountains.aegpresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandiego.resetconcertseries.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c7d5fe68600000403004730450220423ec74527802026a404585f947de74a2665203bd9b8953d0f4fe0db355fb18f022100c3bd4d07ba2357ac2b91c7ac46611852d4b33f9d22066d4d3f0ef329f3a1340700770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c7d5fe85c0000040300483046022100c10cdb6e29d01fb15c6a4a5503608b7420724ef4e8916281ef165d1c10289769022100bb939b48ae1ef0850360baa871924f6300af4aecf79fb12d99e993e38c2f3013
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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