thescore.tv

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a2:4b:04:0f:19:66:09:93:d6:26:b3:bb:4c:31:04:d8:bd was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=thescore.tv

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a2:4b:04:0f:19:66:09:93:d6:26:b3:bb:4c:31:04:d8:bd
Serial Number (int): 316562314411592501017820768082912524687549
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 79:38:cf:0a:27:2e:09:02:46:75:2a:da:e9:0f:bb:92:d4:fb:3c:83
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e1:66:17:a6:20:70:a3:ec:07:69:0b:d1:44:71:4b:f4:3d:3d:b2:80
Fingerprint (sha256): ea:2f:0a:65:58:6d:aa:01:2d:93:c7:68:07:51:13:6c:37:08:56:56:14:cb:58:8e:1a:17:f4:a5:dd:68:3e:c0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate thescore.tv

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thescore.tv

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.golfclub.hk
autodiscover.thescore.tv
cpanel.golfclub.hk
cpanel.thescore.tv
golfclub-hk.radicalnames.com
golfclub.hk
mail.golfclub.hk
mail.thescore.tv
thescore-tv.radicalnames.com
thescore.tv
webdisk.golfclub.hk
webdisk.thescore.tv
webmail.golfclub.hk
webmail.thescore.tv
www.golfclub-hk.radicalnames.com
www.golfclub.hk
www.thescore-tv.radicalnames.com
www.thescore.tv

Other certificates including the domain name thescore.tv

(limited to 100 certificates)
thescore.tv
thescore.tv
had.ax
rouletteonline.co.za
radicalnames.com
omio.dk
entrepreneurs.es
thescore.tv
socialbabes.com
thescore.tv
thescore.tv

Certificate

The complete raw certificate details for thescore.tv in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG2TCCBcGgAwIBAgISA6JLBA8ZZgmT1iazu0wxBNi9MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MDIxMjAzMTFaFw0x
OTA4MzExMjAzMTFaMBYxFDASBgNVBAMTC3RoZXNjb3JlLnR2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj+KbBFeg5lSoMem6t0h6NLN3tkj1RWfZF+E
WN2knFsLbpPjXW1jtQ2Ns6BuV+zEd7KjdCp+RRgwI+lsfV2Uuwgf7WABlxp5sgGG
jjFwSaVYBKQ99flspyqdPX/ilI2FIgZPVLJUY25iPPcwy1ZEM0w7MccPp35DPjuK
NyxHKm6mwfK7u8357vffxMzs/Jcx2x5AgeIiu967JSPcrordXd/Tbj6rdiLniRD4
5NVmZ1u9+nyM8bdBik07ZJ2mmKYlTxA/pmRJuW7pnJCxPzq7KBmYk6zSnJLVmn7K
bh3pyWSpwuQY4z+mKhyUcX/I5HMh44YR9lEYJv5TbHk8hMEWQwIDAQABo4ID6zCC
A+cwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBR5OM8KJy4JAkZ1KtrpD7uS1Ps8gzAf
BgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEw
LgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcw
LwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcv
MIIBnQYDVR0RBIIBlDCCAZCCGGF1dG9kaXNjb3Zlci5nb2xmY2x1Yi5oa4IYYXV0
b2Rpc2NvdmVyLnRoZXNjb3JlLnR2ghJjcGFuZWwuZ29sZmNsdWIuaGuCEmNwYW5l
bC50aGVzY29yZS50doIcZ29sZmNsdWItaGsucmFkaWNhbG5hbWVzLmNvbYILZ29s
ZmNsdWIuaGuCEG1haWwuZ29sZmNsdWIuaGuCEG1haWwudGhlc2NvcmUudHaCHHRo
ZXNjb3JlLXR2LnJhZGljYWxuYW1lcy5jb22CC3RoZXNjb3JlLnR2ghN3ZWJkaXNr
LmdvbGZjbHViLmhrghN3ZWJkaXNrLnRoZXNjb3JlLnR2ghN3ZWJtYWlsLmdvbGZj
bHViLmhrghN3ZWJtYWlsLnRoZXNjb3JlLnR2giB3d3cuZ29sZmNsdWItaGsucmFk
aWNhbG5hbWVzLmNvbYIPd3d3LmdvbGZjbHViLmhrgiB3d3cudGhlc2NvcmUtdHYu
cmFkaWNhbG5hbWVzLmNvbYIPd3d3LnRoZXNjb3JlLnR2MEwGA1UdIARFMEMwCAYG
Z4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMu
bGV0c2VuY3J5cHQub3JnMIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcA4mlLribo
6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFrGElojAAABAMASDBGAiEAnueC
hHRlKnGJm9x4AMrZjGAVcDOdfJtofhO6UHtfsR0CIQCBLB+MrssrJ04HmwrKUV38
8wlF6f3ps/MZbL6xMrd7BwB3AGPy283oO8wszwtyhCdXazOkjWF3j711pjixx2hU
S9iNAAABaxhJaKIAAAQDAEgwRgIhAN28+oExd3TU7lbXxA6eKxtAvtd8L1rrhQYv
XVXSF016AiEA0mq9mCLUf3VQ87RogQCAoH1rPgeh5tekMukkNn8pPjIwDQYJKoZI
hvcNAQELBQADggEBAHIeXlVQLsNoNbtdWnKtXMIjspy/b30wpi0CZ8vI0nBE0syb
UNLiJU7Th+AmpVkqM3BKPViC+In4dTP6rp/iB+7WWxYjfdY4gl+CNyF323JhQio6
yWxnLSy/hc00J8zQ9kcEpPJDypAnnZPBj17+iqU71P2IipumHw/g1z/pG89Uf4Jl
Oo/TyRTjKadmKWsFiulVW+SiAITLffj1522l/AuaVfmcVXTFKEfw9cuqZn6LfwCk
hz2pbtejzGQFMD/AxpcQNmAjavT3PMUy1QpYmEGL9atG3IRS7NO7xRDGHgGx9QX2
Z6b1HXIrxQG7ohVylTT5JkiJq6J3YVTWYA3e/lA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj+KbBFeg5lSoMem6t0h
6NLN3tkj1RWfZF+EWN2knFsLbpPjXW1jtQ2Ns6BuV+zEd7KjdCp+RRgwI+lsfV2U
uwgf7WABlxp5sgGGjjFwSaVYBKQ99flspyqdPX/ilI2FIgZPVLJUY25iPPcwy1ZE
M0w7MccPp35DPjuKNyxHKm6mwfK7u8357vffxMzs/Jcx2x5AgeIiu967JSPcrord
Xd/Tbj6rdiLniRD45NVmZ1u9+nyM8bdBik07ZJ2mmKYlTxA/pmRJuW7pnJCxPzq7
KBmYk6zSnJLVmn7Kbh3pyWSpwuQY4z+mKhyUcX/I5HMh44YR9lEYJv5TbHk8hMEW
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316562314411592501017820768082912524687549
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-02 12:03:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-31 12:03:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thescore.tv'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20481938497134860455208590494723348207452079910541005792525441146192345475436291249004703418910953240465494971899547915024324399883658683156144018875521415830166890228381010112690556914602015945292574499369820712011702439230659795252935413411250076069655858094644338328750219004645943387497904654521739672233243794150809489014757057431295883754117868879036622945253053548775933130211067679145225951287679711449964354614349704926999384893517177559123630674269772507828942361189003281510844065713333525585610365683154613699508774526209778432818599718079039711517021579154449129026366920958893160459402212060557503174211
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7938cf0a272e090246752adae90fbb92d4fb3c83
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (404 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.golfclub.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.thescore.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.golfclub.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.thescore.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golfclub-hk.radicalnames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golfclub.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.golfclub.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.thescore.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thescore-tv.radicalnames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thescore.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.golfclub.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.thescore.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.golfclub.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.thescore.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.golfclub-hk.radicalnames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.golfclub.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thescore-tv.radicalnames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thescore.tv'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b1849688c00000403004830460221009ee7828474652a71899bdc7800cad98c601570339d7c9b687e13ba507b5fb11d022100812c1f8caecb2b274e079b0aca515dfcf30945e9fde9b3f3196cbeb132b77b0700770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b184968a20000040300483046022100ddbcfa81317774d4ee56d7c40e9e2b1b40bed77c2f5aeb85062f5d55d2174d7a022100d26abd9822d47f7550f3b468810080a07d6b3e07a1e6d7a432e924367f293e32
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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