arkiv.status.geoikt.no

Issued by R3

About this certificate

This digital certificate with serial number 04:fa:20:70:e3:4d:5d:d7:8a:02:e6:be:72:0a:43:1d:41:cc was issued on by Let's Encrypt.

With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=arkiv.status.geoikt.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:fa:20:70:e3:4d:5d:d7:8a:02:e6:be:72:0a:43:1d:41:cc
Serial Number (int): 433562856900625466880198804553404595913164
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7f:bd:43:88:3f:2c:1c:27:6e:b6:81:d2:ea:cc:ba:50:6b:6a:eb:86
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5a:93:53:e4:eb:e3:50:48:ea:36:84:de:1c:14:c6:50:58:33:80:47
Fingerprint (sha256): e0:65:c6:5d:cc:61:48:86:c7:02:9c:a4:62:7e:9c:6a:6c:67:22:1e:2a:4f:24:c9:bb:e3:5e:5f:0c:50:4b:de

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate arkiv.status.geoikt.no

38

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for arkiv.status.geoikt.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arkiv.status.geoikt.no
cu.status.jasper.com
floridablue-status.pager.com
status-page.gurado.io
status.accessmanagement.motion.abb.com
status.advisorsexcel.com
status.anypayx.com
status.basehq.com
status.byggtjeneste.no
status.chasehistory.net
status.cloud.virtana.com
status.coniq.com
status.courier.com
status.digitraffic.fi
status.dmdata.jp
status.efficientlearning.com
status.evolveip.eu
status.gericall.nl
status.herocoders.com
status.iexapis.com
status.inaxus.com
status.koin.network
status.lambdalabs.com
status.livingsecurity.com
status.loopup.com
status.medius.com
status.namirial.com
status.prontoforms.com
status.surfly.jp
status.tartu.ee
status.trimessa.nl
status.trueipsolutions.com
status.usemechanic.com
status.wasabi.com
statuspage.sports.gracenote.com
uhg.status.netskope.io
www.cypressstatus.com
www.gitpodstatus.com

Other certificates including the domain name geoikt.no

(limited to 100 certificates)
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
test-nvdb-client.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
status.cayuse.com
arkiv.status.geoikt.no
arkiv.status.geoikt.no
demo-georeg-api.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
demo-nvdb-client.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
*.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no
arkiv.status.geoikt.no
arkiv.status.geoikt.no
braveg.status.geoikt.no
braveg.status.geoikt.no

Certificate

The complete raw certificate details for arkiv.status.geoikt.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QwLDxa1NCgJNDfi/Xvo
QhJ1WubFTY0gc6pxAMude38981PXRPUJpef2Ngkxa5G5FDvRy7JzwTOtjdQGNjzm
5w5G0iffy85hZMan2E/ZmNSrboeDm1TfZZtPAS8GjMJphXee2h+yU1amTE1sQLLI
CyVffNv7iJnIJy0TjfhJUaEiCBaggur2pNmmVlIdqcuF+4Z0g6EFJYjT6zK09DhT
4GMKKHdwLVB3Uo3/DZLuVs6Aq/i8fIdLxGwQu1LQa9Q4i1xM5BDXIJFw2xJ+jkQd
kxX4ZbVHmHe5U3tS7e6qJ3AVQ9kiMqe0zPi9ERU38H18dav7+YOpm6tugCPpmfMq
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 433562856900625466880198804553404595913164
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-15 14:37:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 14:37:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'arkiv.status.geoikt.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27904604120257849083168539420483484489600884934125566545782683287589717537396565145914712681486573404467316646531102807436951830517552312470928654161476588451219222430592105017952774262516322796943631371537511310721629741103781164880707620324856305787765020195935840183783732408100707380917033049474807222218799314110099533031469426081858734748622399120629781629603253947677089388921317054396557766556596847458149572090715380725968844888738066108524943409254098872595949215253185123043509307950809199025511342818834331158095195392821236576325091549124368847480123968306223197442134026072805682244419094490294103779867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7fbd43883f2c1c276eb681d2eaccba506b6aeb86
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (876 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkiv.status.geoikt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cu.status.jasper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'floridablue-status.pager.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status-page.gurado.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.accessmanagement.motion.abb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.advisorsexcel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.anypayx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.basehq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.byggtjeneste.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.chasehistory.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.cloud.virtana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.coniq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.courier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.digitraffic.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.dmdata.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.efficientlearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.evolveip.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.gericall.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.herocoders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.iexapis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.inaxus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.koin.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.lambdalabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.livingsecurity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.loopup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.medius.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.namirial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.prontoforms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.surfly.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.tartu.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.trimessa.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.trueipsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.usemechanic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.wasabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statuspage.sports.gracenote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhg.status.netskope.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cypressstatus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gitpodstatus.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b33fc3aff0000040300483046022100bfa9804526d440f45f64cb658aa02ab3a1372fd4f5c389a8b2e84e96f6f0ff8c022100a1c24a6249541227d4bd82fb6c694d7e6a05ff10397d09ecf31377131c826d6b007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b33fc3b2c0000040300473045022100f8a94edd48510920663ad1993a8d30d2112e7308817a0e03b974487a8cbcad60022030b13c7093bddea708559a7bbeb0847be30b91159977a54366b5b91bf6c3f83a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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