mifactura.penwin.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:31:48:0e:a9:bb:ac:15:51:a6:49:3b:00:50:88:8e:a9:8d was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mifactura.penwin.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:31:48:0e:a9:bb:ac:15:51:a6:49:3b:00:50:88:8e:a9:8d
Serial Number (int): 278106474324855404682023265283566270851469
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 20:70:b2:c1:ab:d0:b5:8b:d8:16:06:a1:ec:24:1e:b3:27:f1:a8:f7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4a:9d:41:d9:83:b8:b5:16:95:f2:05:d5:1b:dc:70:c0:11:59:6c:52
Fingerprint (sha256): ea:42:f1:74:92:0a:d3:41:05:f0:c7:fa:96:75:8a:db:a2:ef:7f:74:15:39:17:2f:75:b7:21:b5:8c:44:7f:58

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mifactura.penwin.org

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mifactura.penwin.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

books.antbrick.com
books.drinknjoy.com
books.laaos.eu
books.marcareeds.com
books.sudolio.as
client.elyone.com
clients.happy-monkey.fr
mifactura.penwin.org

Other certificates including the domain name penwin.org

(limited to 100 certificates)
servicedesk.quanta.com
books.cs.zohohost.eu
ezglobe.support.virtuo.mc
customers.systempilot.net
accounts.senapsis.com
edu.penwin.org
books.cs.zohohost.eu
books.cs.zohohost.eu
help.qweb.si
books.cs.zohohost.eu
support.medixus.co
books.cs.zohohost.eu
connectivity.profitroom.com
help.qweb.si
books.cs.zohohost.eu
moncompte.dv2mobilier.fr
edu.penwin.org
books.cs.zohohost.eu
sni.cloudflaressl.com
books.cs.zohohost.eu
books.groupedlg.fr
books.cs.zohohost.eu
books.cs.zohohost.eu
sni.cloudflaressl.com
help.qweb.si
service.wineowners.com
support.zkracht.nl
kunden.bardelt.de
books.ledaros.com
desk.10atm.com
books.cs.zohohost.eu
books.cs.zohohost.eu
books.cs.zohohost.eu
billing.clapped.im
books.rissc.org
help.qweb.si
books.laaos.eu
books.cs.zohohost.eu
books.cs.zohohost.eu
books.cs.zohohost.eu
books.cs.zohohost.eu
books.cs.zohohost.eu
helpdesk.amlltd.co.uk
books.cs.zohohost.eu
books.cs.zohohost.eu
development.grccontrol.com
books.texolife.com
support.tiger-optics.com
books.laaos.eu
edu.penwin.org
books.laaos.eu
edu.penwin.org
help.qweb.si
portail-client.porsche-informatik.com
edu.penwin.org
support.ibuy2give.co.uk
support.wazzupsoftware.com
books.cs.zohohost.eu
books.cs.zohohost.eu
support.amplyfi.com
help.qweb.si
books.cs.zohohost.eu
support.hgem.com
support.slidestovideo.com
services.rightmarket.com
extranet.numsquare.fr
books.cs.zohohost.eu
help.qweb.si
store.beepy.se
books.laaos.eu
contact.recbody.com
books.laaos.eu
help.qweb.si
books.cs.zohohost.eu
accounts.hgem.com
support.emls.fr
books.cs.zohohost.eu
help.qweb.si
desk.wgc.ltd.uk
edu.penwin.org
books.laaos.eu
books.cs.zohohost.eu
books.laaos.eu
books.cs.zohohost.eu
support.custom-gateway.co.uk
books.cs.zohohost.eu
sni.cloudflaressl.com
adv.topsys.fr
books.cs.zohohost.eu
books.cs.zohohost.eu
edu.penwin.org
books.cs.zohohost.eu
billing.sporav.co.uk
books.cs.zohohost.eu
books.laaos.eu
support.yourdigitallab.co.uk
books.palmfruits.nl
books.cs.zohohost.eu
support.fermax.com
support.nlpensioen.nl

Certificate

The complete raw certificate details for mifactura.penwin.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF8DCCBNigAwIBAgISAzFIDqm7rBVRpkk7AFCIjqmNMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEyMjAwNDI2MjRaFw0x
OTAzMjAwNDI2MjRaMB8xHTAbBgNVBAMTFG1pZmFjdHVyYS5wZW53aW4ub3JnMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAfu7yVE0fqxegt7H9fbJ/fn
1p12nUGMdb1J4RS25N8uUJ6vVyAOUX2ejIKnO5ze27cavb+4nkywSeNYmjhefrDO
QCqeyU9eB4R+Db7QPLnkqfB6n65ldDKsjtVnXAPujlh26W44xkERG+jkGDILzyDE
8lNPbcviOtWCSOVNbplXc9cbgs3eiBiWAxAmHY65qBXbInfIvVUXJp5oPUKCLqZo
nQsoSWPu2Pv8UeI+5MLgyopz+AjvXtn3j6PzqJwWvi+1hZqxuI8V2J989xKo9t1x
+15GTEt+EQiAxfunH5au3xC+HnImOgpH7HjWR3kwoGdm/jSCoAKFP4HaLFdvWwID
AQABo4IC+TCCAvUwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQgcLLBq9C1i9gWBqHs
JB6zJ/Go9zAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEF
BQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5j
cnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5j
cnlwdC5vcmcvMIGuBgNVHREEgaYwgaOCEmJvb2tzLmFudGJyaWNrLmNvbYITYm9v
a3MuZHJpbmtuam95LmNvbYIOYm9va3MubGFhb3MuZXWCFGJvb2tzLm1hcmNhcmVl
ZHMuY29tghBib29rcy5zdWRvbGlvLmFzghFjbGllbnQuZWx5b25lLmNvbYIXY2xp
ZW50cy5oYXBweS1tb25rZXkuZnKCFG1pZmFjdHVyYS5wZW53aW4ub3JnMEwGA1Ud
IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0
dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDw
AHYA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFnyhRCJAAABAMA
RzBFAiADKZVFJ8b2ALK77A1ojtZ+sLO+l170A0GfRC/eYgBaRwIhAJVGsVIM6eI0
lSsJEhiwt6IPcMBzfVCQcCgXpdiF1fj6AHYAKTxRllTIOWW6qlD8WAfUt2+/WHop
ctykwwz05UVH9HgAAAFnyhRAMAAABAMARzBFAiBjoId3eSWTVsJR51wnJc5+5l2U
QYPCxVjKyWCS8l0GrgIhAOUYwF1NM2Vb0ZgNYuPkXJWEXNCdkbodQVjR3JyXCUjm
MA0GCSqGSIb3DQEBCwUAA4IBAQAs7yfO2QO1jV2qzSZluXKd/o04FlQQFowV9KNo
8T+le7NV9B/pbKq1ckwKHY3FuwRQCZcYdSgdd4qechGch+5oOgeyiTtVtfNdZt7u
zpsCvXyYi2ONDdEApwXkFatiWpDk88cEZYuay9tebDW2CmWAkQKMoP3SYSKo/Ggt
njEc2cFvaGi/nh2/iLStbpybbXyR8rKbG1vSHWNTWATi8hAeGb7x1lwtAn61qeFo
Ctmn5U0KrfSTvGNEVwpgalpuOnSeNjYBFbcUCh8e6DRYxPf50mh/XmTOMMrZNSR1
CxJ3CZpbI8xO14tHSYgZX+YA4Epuvt5WeABvNs03vrNwPoGv
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAfu7yVE0fqxegt7H9fb
J/fn1p12nUGMdb1J4RS25N8uUJ6vVyAOUX2ejIKnO5ze27cavb+4nkywSeNYmjhe
frDOQCqeyU9eB4R+Db7QPLnkqfB6n65ldDKsjtVnXAPujlh26W44xkERG+jkGDIL
zyDE8lNPbcviOtWCSOVNbplXc9cbgs3eiBiWAxAmHY65qBXbInfIvVUXJp5oPUKC
LqZonQsoSWPu2Pv8UeI+5MLgyopz+AjvXtn3j6PzqJwWvi+1hZqxuI8V2J989xKo
9t1x+15GTEt+EQiAxfunH5au3xC+HnImOgpH7HjWR3kwoGdm/jSCoAKFP4HaLFdv
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278106474324855404682023265283566270851469
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-20 04:26:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-20 04:26:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mifactura.penwin.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25756526287144600175164291305873148731417957399762615613489859492641364299693277305312781228331423653532143760422366864235724792155139325005800007126597766184109094299280937452009633996641453012434165373754955021055140683470134271711993511603165138850276904120980494578744944068246086601538200560233667768960792054655569258645081061058881355022211849547615892228942806364758612030713068618391493478579349544841180539104084487146837348947403021372818491153828165084812841257000017845561775049531841794754067136951676185105848267492188725278175330743586782217803212465861024407651720716266425021699814186825559156682587
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2070b2c1abd0b58bd81606a1ec241eb327f1a8f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (166 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.antbrick.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.drinknjoy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.laaos.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.marcareeds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.sudolio.as'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.elyone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.happy-monkey.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mifactura.penwin.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000167ca144224000004030047304502200329954527c6f600b2bbec0d688ed67eb0b3be975ef403419f442fde62005a470221009546b1520ce9e234952b091218b0b7a20f70c0737d5090702817a5d885d5f8fa007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000167ca1440300000040300473045022063a0877779259356c251e75c2725ce7ee65d944183c2c558cac96092f25d06ae022100e518c05d4d33655bd1980d62e3e45c95845cd09d91ba1d4158d1dc9c970948e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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