www.uspspostalone.com

- United States Postal Service -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 09:27:1c:10:2f:d3:43:de:76:82:2a:1d:0e:1d:1f:9e was issued on by DigiCert Inc.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

United States Postal Service

Organization: United States Postal Service
Organization unit: Telecommunications Services
State / Province: North Carolina
Locality: Raleigh
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:27:1c:10:2f:d3:43:de:76:82:2a:1d:0e:1d:1f:9e
Serial Number (int): 12166120729467802920461100682506477470
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 41:80:a0:fc:81:9d:9c:81:c2:28:bf:f1:74:23:ee:20:1e:d5:77:2c
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 3a:c1:42:7c:65:70:7d:c7:d2:ae:79:fe:d7:82:ad:5d:72:ce:a6:cf
Fingerprint (sha256): ea:4c:9d:d2:26:a6:20:7c:06:16:bc:1e:4d:6c:86:8b:a7:03:c4:44:c1:c0:c4:3a:6f:6f:85:da:3a:26:e6:c2

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.uspspostalone.com

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.uspspostalone.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.uspspostalone.com
uspspostalone.com
www.blueearth.usps.gov
www.m.usps.com
keepingposted.org
myusps.gov
www.liteblue.usps.gov
moversguide.com
www.moversguide.com
metrics.uspsinnovates.gov
stage-www.uspspostalone.com
trkcnfrm1.smi.usps.com
www.keepingposted.org
uspsinnovates.gov
stage-www.keepingposted.org
uspsinformeddelivery.gov
uspsinformeddelivery.com

Other certificates including the domain name uspspostalone.com

(limited to 100 certificates)
myusps.gov

cat1a.usps.com
www.uspspostalone.com
*.keepingposted.org
www.uspspostalone.com
www.uspspostalone.com
tem1a.usps.com

mailxmltem.uspspostalone.com
tem1a.usps.com
cat1a.usps.com
fast.uspspostalone.com
prod1a.usps.com
cat1a.usps.com
www.uspspostalone.com
www.uspspostalone.com
preprod.uspspostalone.com
UNITED STATES POSTAL SERVICES IT
*.keepingposted.org
prod1a.usps.com
prod1a.usps.com
prod1a.usps.com
www.uspspostalone.com
fast.uspspostalone.com
www.uspspostalone.com
www.uspspostalone.com
cat1a.usps.com
preprod.uspspostalone.com
www.uspspostalone.com
cat1a.usps.com
tem1a.usps.com

www.uspspostalone.com
upload9.uspspostalone.com

www.uspspostalone.com
UNITED STATES POSTAL SERVICES IT
cat1a.usps.com
www.uspspostalone.com
preprod.usps.com
preprod.uspspostalone.com
cat1a.usps.com
www.uspspostalone.com
www.uspspostalone.com

www.uspspostalone.com

preprod.uspspostalone.com
*.keepingposted.org
www.uspspostalone.com
www.uspspostalone.com

preprod.usps.com

www.uspspostalone.com
myusps.gov
myusps.gov
upload1.uspspostalone.com
www.uspspostalone.com
tem1a.usps.com
fast.uspspostalone.com
www.uspspostalone.com
cat1a.usps.com
prod1.uspspostalone.com
preprod.usps.com
cat1a.usps.com

myusps.gov
www.uspspostalone.com
cat1a.usps.com
www.uspspostalone.com

www.uspspostalone.com
fast.uspspostalone.com
*.keepingposted.org
tem1a.usps.com
myusps.gov
www.uspspostalone.com
www.uspspostalone.com
myusps.gov
www.uspspostalone.com
www.uspspostalone.com
www.uspspostalone.com
fast.uspspostalone.com

www.uspspostalone.com
www.uspspostalone.com
www.uspspostalone.com
www.uspspostalone.com
www.uspspostalone.com

Certificate

The complete raw certificate details for www.uspspostalone.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pArItCE1aL1ZF5J/wIQ
0y8YhbOYB+mAloYMF8sv9DlD2bgi5EpR2tm71VcpEx4LGJ3wDUBr/cYeILgbytzc
9hciWUE3DcvFZNgB28GD1JSxtLPdmhCFxn3zLPRitl1wQBdDtGo8N8G9yoCerUFb
61gxKXLJfr0iR9Bncr37Fas4Oh9Qbwd0lL1eUPxFMXkbOXfhP7qeRurZRb3cVzIR
chRg0c6jUUdJob/IMUoOb0WZLGfwTIqw4bFcvbXYIMNWVIqPkB/94WTK8Ao8y/cB
2dTTXPPI5mig0SWtMd49CDNzrbmdqyJ1fI/Lly4Rr4DPvejxJQAdXlmglj7o9qFS
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12166120729467802920461100682506477470
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Raleigh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'United States Postal Service'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Telecommunications Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.uspspostalone.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26581136179851457790289696532988158862332997904079716285578197346675360746125380818872235446752927779598569622838916949045556247795398803750077526101917655949692849175281643160398098677993912987623169047961694132631397228302877558883083429569589146561660048844651625822647944262940201599416297566471442883783688449682974839506618131404742150338656682952369196281726316693215056001818808932700234814800582950312009650311574569630680674208298336350074589959315806933499276262608098489972007539982356743268427087068915081416730459548452689779181209162107539237763391275953231538043527541291733811277695493280539709887113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4180a0fc819d9c81c228bff17423ee201ed5772c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (381 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uspspostalone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uspspostalone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blueearth.usps.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m.usps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keepingposted.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myusps.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liteblue.usps.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moversguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moversguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.uspsinnovates.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-www.uspspostalone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trkcnfrm1.smi.usps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keepingposted.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uspsinnovates.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-www.keepingposted.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uspsinformeddelivery.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uspsinformeddelivery.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001668c342d120000040300463044022062e4f099aa6d4115fdccefc007985a2ce989ba4e634de6cf0c1624daf88290c0022009293bbda995107d078b49a6f6e57e2464fa2b9bcaee9ecbd6801760b83c4cd00076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001668c342de70000040300473045022018e4c6f33fe2618f5617bc817673386d3e95b402cee79e2db05f6fb27e3425eb0221009430ffd932ba2fc42f752b1e8ac9febeef2f13262c6b4230deaf39f016a66283
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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