ws2.qsys.co.uk

Issued by R3

About this certificate

This digital certificate with serial number 03:a2:69:74:95:f7:4d:24:74:41:6c:b0:40:a7:f3:d6:35:69 was issued on by Let's Encrypt.

With 54 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ws2.qsys.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:a2:69:74:95:f7:4d:24:74:41:6c:b0:40:a7:f3:d6:35:69
Serial Number (int): 316602775524138038728807510649648014833001
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b1:bd:20:0f:11:fe:9c:36:34:5c:b7:c2:9e:03:8b:f3:d5:66:5d:98
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b3:6c:43:e9:45:e4:8b:89:7a:9f:dd:10:eb:5b:68:4f:68:3a:b9:ab
Fingerprint (sha256): fd:4d:c3:e1:e7:cc:2f:27:ac:0a:a0:62:25:04:6c:8b:b5:0d:f7:55:66:39:29:7a:ac:56:c7:63:2f:8f:68:09

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ws2.qsys.co.uk

54

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ws2.qsys.co.uk

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bernhards-nurseries.co.uk
bernhardsnurseries.co.uk
bridgenursery.co.uk
bridgevps.bridgenursery.co.uk
connect.qsys.co.uk
countrywestern.org.uk
dreamtree.cloud
dreamtree.me
education-sales.co.uk
education-sales.com
fatboysound.uk
hawkinshatton.co.uk
helpdesk.thecomputerfactory.co.uk
hemaxhealthcare.co.uk
heulwentrust.co.uk
hunterlloyd.co.uk
jasminenursery.co.uk
lloydwatson.com
officehouse.biz
oliversplants.co.uk
orders.bridgenursery.co.uk
orders.dreamtree.cloud
orders.oliversplants.co.uk
orders.tandeenursery.co.uk
premiergardenplants.co.uk
qsys.co.uk
robinsonandyoung.com
tandeenursery.co.uk
thecomputerfactory.co.uk
wemremembers.org
ws2.qsys.co.uk
www.bernhards-nurseries.co.uk
www.bernhardsnurseries.co.uk
www.bridgenursery.co.uk
www.countrywestern.org.uk
www.dreamtree.cloud
www.dreamtree.me
www.education-sales.co.uk
www.education-sales.com
www.fatboysound.uk
www.hawkinshatton.co.uk
www.hemaxhealthcare.co.uk
www.heulwentrust.co.uk
www.hunterlloyd.co.uk
www.jasminenursery.co.uk
www.lloydwatson.com
www.officehouse.biz
www.oliversplants.co.uk
www.premiergardenplants.co.uk
www.qsys.co.uk
www.robinsonandyoung.com
www.tandeenursery.co.uk
www.thecomputerfactory.co.uk
www.wemremembers.org

Other certificates including the domain name qsys.co.uk

(limited to 100 certificates)
connect.qsys.co.uk
ws2.qsys.co.uk
connect.qsys.co.uk
connect.qsys.co.uk
connect.qsys.co.uk
connect.qsys.co.uk
qsys.co.uk
connect.qsys.co.uk
autodiscover.education-sales.com
connect.qsys.co.uk
connect.qsys.co.uk
connect.qsys.co.uk
ws2.qsys.co.uk
connect.qsys.co.uk
connect.qsys.co.uk
connect.qsys.co.uk
ws2.qsys.co.uk
autodiscover.education-sales.com
connect.qsys.co.uk
exch01.education-sales.com
autodiscover.education-sales.com
ws2.qsys.co.uk
connect.qsys.co.uk
ws2.qsys.co.uk
ws2.qsys.co.uk
connect.qsys.co.uk
ws2.qsys.co.uk

Certificate

The complete raw certificate details for ws2.qsys.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316602775524138038728807510649648014833001
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 14:51:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-12 14:51:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ws2.qsys.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4081759902367893434516414884308305654341565567276863640483030460695500202121272352843049775985711800148681742364447219182672217290857050453089509340102187621997391047117712980162056359852757845730267688751087923668805489453024045249416444475044465015139607218191391156783003974985076918548687767529103216703784128141516481625906602765351539617174228946304520854250202257928461882080601946873270752368724631304612659342123209845380156897150475629345250475264817314649308047319812917253537155470903035250163886238406046485053027914001167777829875528689240243367428741821948166855763003881472278655783183311055787403057817524359950843592932863032022170032155889570318222346412707781326390282092727961868793969801388026574803207645174294367207266848332499447335059897607393213612307137418059226723467441819657882182669340964562058826504456313203012461702568959921894443927379850201510474200580417765469357448773083772288078180013
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b1bd200f11fe9c36345cb7c29e038bf3d5665d98
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1254 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bernhards-nurseries.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bernhardsnurseries.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridgenursery.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridgevps.bridgenursery.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.qsys.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countrywestern.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreamtree.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreamtree.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'education-sales.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'education-sales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatboysound.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkinshatton.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.thecomputerfactory.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemaxhealthcare.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heulwentrust.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hunterlloyd.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jasminenursery.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lloydwatson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'officehouse.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oliversplants.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orders.bridgenursery.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orders.dreamtree.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orders.oliversplants.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orders.tandeenursery.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premiergardenplants.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qsys.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robinsonandyoung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tandeenursery.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecomputerfactory.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wemremembers.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws2.qsys.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bernhards-nurseries.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bernhardsnurseries.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bridgenursery.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countrywestern.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dreamtree.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dreamtree.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.education-sales.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.education-sales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fatboysound.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkinshatton.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hemaxhealthcare.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heulwentrust.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hunterlloyd.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jasminenursery.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lloydwatson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.officehouse.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oliversplants.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premiergardenplants.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qsys.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robinsonandyoung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tandeenursery.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecomputerfactory.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wemremembers.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d9e049aaf0000040300463044022070719955f224f692e00e75bd611ee26a2e4cba3a07eb1b26e4a5e406828f2226022027363b45700a9ee957a6f6e7556ef5bbf8c10ecb4059cd30d380a61a35b6628800770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d9e049aef0000040300483046022100eda5b8534a7fb9ac5243ba68ca3973ebcd7d9a5aeaa7612d014b90f32a631c8a022100a86c28c4dc3fd90d226af9c3dcbd3a2c0d81f05c4de56275ef12386c41959456
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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