sp.gosanangelo.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:37:b9:16:f7:0f:40:ba:35:ec:9a:19:04:77:57:88:15:04 was issued on by Let's Encrypt.

With 46 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sp.gosanangelo.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:37:b9:16:f7:0f:40:ba:35:ec:9a:19:04:77:57:88:15:04
Serial Number (int): 367410700328407325974833766685001640318212
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 1f:62:b2:b2:18:aa:ea:30:2d:69:fc:92:56:6b:00:fc:8e:07:d1:79
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f5:64:03:9d:5b:cd:8e:ea:2c:64:e6:fd:cf:e4:41:54:85:d9:9b:e8
Fingerprint (sha256): 00:02:8d:9d:06:be:5c:68:e3:22:ff:21:78:49:d0:04:71:1f:e5:bc:36:58:88:33:13:a3:20:d1:d2:86:0e:b3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sp.gosanangelo.com

46

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sp.gosanangelo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sp.gosanangelo.com
sp.greatfallstribune.com
sp.greenbaypressgazette.com
sp.greenvilleonline.com
sp.guampdn.com
sp.hattiesburgamerican.com
sp.hawkcentral.com
sp.hometownlife.com
sp.htrnews.com
sp.independentmail.com
sp.indystar.com
sp.ithacajournal.com
sp.jacksonsun.com
sp.jconline.com
sp.jsonline.com
sp.kitsapsun.com
sp.knowyourmeme.com
sp.knoxnews.com
sp.lancastereaglegazette.com
sp.lansingstatejournal.com
sp.lavozarizona.com
sp.lcsun-news.com
sp.ldnews.com
sp.livingstondaily.com
sp.lohud.com
sp.mansfieldnewsjournal.com
sp.marionstar.com
sp.marshfieldnewsherald.com
sp.montgomeryadvertiser.com
sp.motherandbaby.co.uk
sp.motorcyclenews.com
sp.muthead.com
sp.mycentraljersey.com
sp.naplesnews.com
sp.nba.com
sp.netweather.tv
sp.newarkadvocate.com
sp.news-leader.com
sp.news-press.com
sp.newsleader.com
sp.nintendolife.com
sp.northjersey.com
sp.packersnews.com
sp.pal-item.com
sp.pnj.com
sp.portclintonnewsherald.com

Other certificates including the domain name gosanangelo.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for sp.gosanangelo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00meO6+a8V3PmL/BqHWt
04Hc0LKCjwfFnPXVrg3aWlmZV7pQ4uYw4kFEAASOzNifxKL1eQ8Z8JAMQ+64PR+I
Ivphr+6RmGhqiX04/+C2XfZe4i9uKSz6WQ8mcCdqpnDJNnPeZFuoDRkZB33D/QNG
LgkhZMcxJEeqFCQgp/RHwNdGw4DP/6ixuDAR6AGWHLJYG5dtiqu99WHvDwx+dt7G
NwRwZS+meGp8nMXbseB96naeiBHaeuphRYbL9xN1h4TROq0GHcJk2XKff30HGYJZ
iR8OYwOZkzpAHn7FGk8NJFlqFDFJ6IdoFjDEqXhz2tOOlOTSotEo9NXUkzFe7FPy
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 367410700328407325974833766685001640318212
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-09 14:06:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-08 14:06:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sp.gosanangelo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26672584785088631450968290999132138921314228928942802759777888576092124338436539074861771053089243210404930738195424387375133907076121652631287527815180557110114479400853463661373117198744620094939007393779803270688537171839503243187361028194933912819340740639260877344977993163384894453440161491510897765065267333793769511639794401444643877828770608304575820862166087210771866031434458982103823197841482730489006286708640375911217419150307546959711273808202450443078435959780053360509888304942957161082707643398420772281183996656422792191906945129918800771731567446333522767856648603160712402159627259792008716481061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f62b2b218aaea302d69fc92566b00fc8e07d179
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (971 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.gosanangelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.greatfallstribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.greenbaypressgazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.greenvilleonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.guampdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.hattiesburgamerican.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.hawkcentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.hometownlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.htrnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.independentmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.indystar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.ithacajournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.jacksonsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.jconline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.jsonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.kitsapsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.knowyourmeme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.knoxnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.lancastereaglegazette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.lansingstatejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.lavozarizona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.lcsun-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.ldnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.livingstondaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.lohud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.mansfieldnewsjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.marionstar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.marshfieldnewsherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.montgomeryadvertiser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.motherandbaby.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.motorcyclenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.muthead.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.mycentraljersey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.naplesnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.netweather.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.newarkadvocate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.news-leader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.news-press.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.newsleader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.nintendolife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.northjersey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.packersnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.pal-item.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.pnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.portclintonnewsherald.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001715f7a064d0000040300483046022100f389a0883260002b9c8578f969a70a275b99fccf9473677041e5de99a5d53e93022100b7a21d22d1101a2fa6bb2737d2815972aede020f2604d80e51cdf3083a10a0fb0077005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001715f7a06620000040300483046022100fa83ff276a4332c21c694b9830ca5ab0e10c9305248614395092e2954ba42786022100ea075708459726344b0ec3e9977c6634d874ede625b976087a1695cb8835b829
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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