sporty.org.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:1b:23:47:88:d1:de:ea:73:25:cb:02:d2:dc:1c:18:6d:63 was issued on by Let's Encrypt.

With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sporty.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1b:23:47:88:d1:de:ea:73:25:cb:02:d2:dc:1c:18:6d:63
Serial Number (int): 357683662041871134295019827512617131863395
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 99:a2:ca:ed:ec:13:7f:2b:4c:d1:98:06:5a:fc:46:78:71:f2:fd:80
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): af:a0:ff:59:7f:d1:63:a6:85:e7:12:a5:38:d5:50:4e:ad:fc:a4:51
Fingerprint (sha256): d8:b3:c3:8a:a3:e7:ba:0a:c6:30:fd:69:bb:08:25:d4:bb:e3:fd:a6:18:12:16:06:e5:f0:5d:8b:5f:df:0b:32

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.org.nz

49

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

athleticsotago.co.nz
aucklandsoftball.org.nz
canoepolohb.co.nz
cashmere.school.nz
cfc.co.nz
christchurchfootballclub.co.nz
countiesmanukaurugbyleague.co.nz
cra.kiwi
cricketwellington.co.nz
ellerslieeagles.co.nz
fenciblefoundation.co.nz
golfnorthland.co.nz
harbourgolf.co.nz
hastingsboys.school.nz
healthyfamilieswaitakere.org.nz
hockeywanganui.org.nz
huianetball.co.nz
kartsport.org.nz
kirweerugby.co.nz
leamingtonrugby.co.nz
lindisfarne.school.nz
lrsc.co.nz
manawatusoftball.org.nz
maniapoto.school.nz
maoribasketball.com
marlboroughnetball.org.nz
marlboroughtrampingclub.co.nz
membermanager.co.nz
metrofootball.org.nz
mff.nz
mitre10park.co.nz
nzteachersgames.co.nz
parklandsrugby.co.nz
patoka.school.nz
pbhockey.co.nz
pioneerfishingclub.co.nz
polo.org.nz
rotoruaunited.co.nz
shirleyrugby.co.nz
sked.co.nz
soulutionzsports.nz
sportsafe.co.nz
sporty.org.nz
sportycrm.co.nz
sportycrm.com
stmw.school.nz
taradaleint.school.nz
volleysouth.org.nz
waihibeachtennisclub.co.nz

Other certificates including the domain name sporty.org.nz

(limited to 100 certificates)
sporty.org.nz
www.sportycrm.com
sporty.org.nz
sporty.org.nz
www.giafc.co.nz
sportycrm.com
sporty.org.nz
fdmc.school.nz
arrowtownrugby.co.nz
sporty.org.nz
sporty.org.nz
www.sportsground.com
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
www.sportsground.com
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
freyberg.ac.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
www.sporty.org.nz
www.ams.school.nz
www.skeggsfoundation.nz
sporty.org.nz
sporty.org.nz

Certificate

The complete raw certificate details for sporty.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyx7XnJQaRDX7ZxhQRgw4
Cf0gIYuWTS/atv9k3g9yEGX8DOUlqotkb6qySnpnjpBtuu2mmBEeugcUoK90xYOd
qfA22TcCDtc9P0qvXfVDXio7xEB+0l7gTTC7iA4L7ofEIddmYH+DWy0dWWoXVx3k
+n4wUaM2nMcYe1O/xkDYF0ZwzPkXrYhWQQ269TAydUj+hqqPRSQEkMpenGcdkFhj
ggsRfRm6p3Q9YclWGW0AdnQQkS9oU+o7k3kV6GnlIOo9XPP3ng3EMs8JMfS50/ll
nYQSZSmkeL/9OCHWDRhpnR8RuzrT+k15v4V9EiK6fGMxbrKlJjpnigbXBdnIamAW
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 357683662041871134295019827512617131863395
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-12 21:23:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-10 21:23:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25641584780019321451310047841558296384869455871640085460436078259393155461366767295882140267644274424172311056807509273617702827652247588655848752132685146817523003890365425195112463533955884287160277519933767117178601878015729315837316374065961869193459631735539357098991129228715791052882949992670050362682962998547729358462203588724231210702823649925440777447868465077098014322401218516190314693571756238227075016379315541389961731829225786391566083066639428247926753562333405163351145594812171030914863337450576346385766908932585059451576919624641560758103808636956521666286473547102888751216627394380724975965873
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							99a2caedec137f2b4cd198065afc467871f2fd80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1023 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athleticsotago.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canoepolohb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashmere.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christchurchfootballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countiesmanukaurugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cra.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cricketwellington.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellerslieeagles.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fenciblefoundation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golfnorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harbourgolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastingsboys.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyfamilieswaitakere.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeywanganui.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huianetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kartsport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirweerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leamingtonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lindisfarne.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lrsc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manawatusoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maniapoto.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maoribasketball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughnetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughtrampingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membermanager.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrofootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mff.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitre10park.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzteachersgames.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parklandsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patoka.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pbhockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pioneerfishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotoruaunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shirleyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sked.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soulutionzsports.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsafe.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportycrm.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportycrm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmw.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taradaleint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volleysouth.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waihibeachtennisclub.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bc5a1f39e0000040300473045022100f1011d25fecf8991d364fb466d3c6c78676b50846a98ed288ae8c23dda957e52022008f92be08938fa5d3b930cb478b243ce67f95910c8a4be5c5547b86694b976000076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bc5a1f39c00000403004730450220429b290a7283c1f1b59fe05f65bb7d8ffb4a415ac48c7d7a030962b8ba09bb0b022100b41f32fb627edfdcd4fafdbe99ae1e804b12a19c37913d36b93faa0b82cb60fe
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a34229169dc20876ae879a3bffe69a090a246400da785b9b7fdd2c85dc3b30163f6d6f3f60f93ecbd3fedd364e66044f416ab16a1105ebc707c124f153c328142b68f115fbd7041710a8a6f9bafc52d32634da717ba856587d69e31f6704b6c0f8aab18096ae8f5e0367708562c8427b977f69e9a7697ce9c836e21e0ed622981ab83b0167e0d98b1c8bb9abae4ee87038f26216bdba45eefa67de1e0c7646b3dc1de5da2f87b439b2079b4a610e2ce5b3d9512baff1697c401e4f7a2a92c99acabd009bb961bd3c255e03261303fd642f1dfd922c441b243e0a6f533e55d858255d93c24caa35f5a36b2ebf983544f661ca63c884916c0c198a478e9b7838bf