step.nasa.gov

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:63:ae:55:31:95:10:fd:c0:43:6d:0b:1d:67:6c:da:59:b5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=step.nasa.gov

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:63:ae:55:31:95:10:fd:c0:43:6d:0b:1d:67:6c:da:59:b5
Serial Number (int): 295256540142601523964864367231369305807285
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 31:68:e6:39:c2:bc:a9:36:5f:70:3c:f2:f3:5a:40:23:c2:67:75:9f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5a:f4:2e:af:be:4c:df:b5:53:65:54:78:d7:7f:b2:6c:94:d9:88:eb
Fingerprint (sha256): 00:2d:5e:14:de:c4:e6:45:be:1c:32:21:6a:ef:61:ee:0a:b7:37:45:e9:fd:76:37:05:2b:fc:e6:e1:d1:1a:94

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate step.nasa.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for step.nasa.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

step.nasa.gov

Other certificates including the domain name nasa.gov

(limited to 100 certificates)
*.jpl.nasa.gov
*.jpl.nasa.gov
*.jpl.nasa.gov
sma.gsfc.nasa.gov
*.jpl.nasa.gov
maptis.ndc.nasa.gov
*.jpl.nasa.gov
nirps-staging.msfc.nasa.gov
plop.nascom.nasa.gov
grin.hq.nasa.gov
*.jpl.nasa.gov
*.jpl.nasa.gov
*.jpl.nasa.gov
lrp.at.nasa.gov
spacecomm.nasa.gov
www-gsfc.edn.gsfc.nasa.gov
science.hq.nasa.gov
server-mpo.arc.nasa.gov
*.jpl.nasa.gov
*.fltops.jpl.nasa.gov
step.nasa.gov
ensight.eosdis.nasa.gov
photonics.gsfc.nasa.gov
education.jsc.nasa.gov
AntiSpam.ndc.nasa.gov
cptrace.nasa.gov
msfcvpn.nasa.gov
sip.jpl.nasa.gov
omisips2.omisips.eosdis.nasa.gov
*.jpl.nasa.gov
nai-ar.ndc.nasa.gov
code.luna.nasa.gov
atfi.hq.nasa.gov
veritas.ndc.nasa.gov
handbook.appdat.jsc.nasa.gov
*.jpl.nasa.gov
stereo-ssc.nascom.nasa.gov
*.dip.amesaero.nasa.gov
monitoring.eva.appdat.jsc.nasa.gov
*.jpl.nasa.gov
straw.nasa.gov
code541.gsfc.nasa.gov
*.jpl.nasa.gov
nescacademy.larc.nasa.gov
ecc.earthdata.nasa.gov
*.jpl.nasa.gov
cptrace.nasa.gov
corrosion.ksc.nasa.gov
minx-docs.arc.nasa.gov
omisips1.omisips.eosdis.nasa.gov
ceres-wg.larc.nasa.gov
*.jpl.nasa.gov
supplychain1.gsfc.nasa.gov
aerocenter.gsfc.nasa.gov
*.jpl.nasa.gov
search.earthdata.nasa.gov
docserver.gesdisc.eosdis.nasa.gov
xanth.nsstc.nasa.gov
science.wff.nasa.gov
dashboard.sandbox.lpdaac.earthdata.nasa.gov
*.jpl.nasa.gov
*.jpl.nasa.gov
istd.gsfc.nasa.gov
uat.earthdata.nasa.gov
*.hq.nasa.gov
sra.jsc.nasa.gov
gs6102dsc-web2.gesdisc.eosdis.nasa.gov
*.jpl.nasa.gov
cxfmea-cil.nasa.gov
openhouse.larc.nasa.gov
*.jpl.nasa.gov
femci.gsfc.nasa.gov
*.jpl.nasa.gov
vso1.nascom.nasa.gov
urap.gsfc.nasa.gov
*.mdscc.nasa.gov
lance4.modaps.eosdis.nasa.gov
*.jpl.nasa.gov
fcportal.nsstc.nasa.gov
*.nccs.nasa.gov
*.jpl.nasa.gov
*.jpl.nasa.gov
*.jpl.nasa.gov
sfa.staging.ird.appdat.jsc.nasa.gov
omisips1.omisips.eosdis.nasa.gov
lacerta.gsfc.nasa.gov
developer.sit.earthdata.nasa.gov
sta3cd-map.larc.nasa.gov
iris.production.appdat.jsc.nasa.gov
ozoneaq.gpc.gsfc.nasa.gov
s3-test.kzebdi.ngap.sit.earthdata.nasa.gov
plmpdms.jpl.nasa.gov
*.homeandcity.nasa.gov
*.jpl.nasa.gov
HumanResearchWiki.jsc.nasa.gov
discovery.larc.nasa.gov
*.jpl.nasa.gov
cmr.earthdata.nasa.gov
sohoftp.nascom.nasa.gov
rtf.nas.nasa.gov

Certificate

The complete raw certificate details for step.nasa.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgISA2OuVTGVEP3AQ20LHWds2lm1MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTMxNDA1NTlaFw0y
MDAzMTIxNDA1NTlaMBgxFjAUBgNVBAMTDXN0ZXAubmFzYS5nb3YwggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyVPx0vWml5PXkS5IdLn61ptoU7aaDC+IK
EYAAH1eefngfs3f3TiyLcO5yDbQBQEKMogkVX2PO+JrBFFiLZzUqVYE8Ij81dqHI
p7N+2Hvp+sSbhalMmLjSlAO/kzgVzI1YoK0UGaIvvk5YosPK+8V+Sfw6WbdcG0oh
B+hrJAouPXk1xmG9uvrC+Ga1ka70TlsDIL2P0UyjKXkXXsu7Z/EnnbvKKBhdga30
x/IfIwTdQ38JZujXk+h+lhTPC+v1dv7dTlL3wKGrlFX/ni6WGO6MeqwdAFnLQR1T
S/IK70qWGp6HX3BMapcGPdFE1qFFC0AViS2tcUdkh5+BMIkB/GhNAgMBAAGjggJi
MIICXjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFDFo5jnCvKk2X3A88vNaQCPCZ3Wf
MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMw
YTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9y
ZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9y
Zy8wGAYDVR0RBBEwD4INc3RlcC5uYXNhLmdvdjBMBgNVHSAERTBDMAgGBmeBDAEC
ATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNl
bmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2APCVpFnyANGCQBAt
L5OIjq1L/h1H45nh0DSmsKiqjrJzAAABbv/LiGwAAAQDAEcwRQIgDVSUDXKdK+jR
bOzuztpV0sulO+kbPy7yZoCF/7an19ECIQDV5i/82jqLaik7G3Z/ZLTJTGNgN/yK
lou+NVf545fWPAB2ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAAB
bv/LiGEAAAQDAEcwRQIhAM8IlwIcal9fgQ9dC8R51VO89T91huZQVkNgCpeAU4g2
AiAq0JxAXGbpsvdHz/OFihBVtb+SigBZp5d0PyWDmmsKcTANBgkqhkiG9w0BAQsF
AAOCAQEAdAcW/scQB+j/6CFI+6FLdbkYgcUR42X/zVICHcccvbhPokfsA19alB9R
31YOfIC8gS4pjInXGrF60pkCD3uGYnjNEeB5xUm3s4m19t3OAZptHKM1OT1uX5hu
kA1luv/1yCs7c7g/mV5OnBCLzTm2e3gZCe6Hz0L8QRDlTzODtOjRABwGa6+fO1+G
IQIqcrwy1e3KHQGvuNWvgK6L9rpC3f/hhVwDF3OKMAETCCI23nJVmRNGR3ozBpCT
QIEadEbp01HaZ7/wVhEVurwOjxLcJqW57FD/KV7PvrH34BteVqO9KtG2i4rNT8kf
8UonaouWZ5yqdGbM/nC9lguqI1UcVA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslT8dL1ppeT15EuSHS5+
tabaFO2mgwviChGAAB9Xnn54H7N3904si3Ducg20AUBCjKIJFV9jzviawRRYi2c1
KlWBPCI/NXahyKezfth76frEm4WpTJi40pQDv5M4FcyNWKCtFBmiL75OWKLDyvvF
fkn8Olm3XBtKIQfoayQKLj15NcZhvbr6wvhmtZGu9E5bAyC9j9FMoyl5F17Lu2fx
J527yigYXYGt9MfyHyME3UN/CWbo15PofpYUzwvr9Xb+3U5S98Chq5RV/54ulhju
jHqsHQBZy0EdU0vyCu9Klhqeh19wTGqXBj3RRNahRQtAFYktrXFHZIefgTCJAfxo
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295256540142601523964864367231369305807285
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-13 14:05:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-12 14:05:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'step.nasa.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22512326519575935054933935448138643490728410530163406250225641906414146677114245025681340929301141489694460057300444834579460814583763387389995289259456175293616668927289006150429261822558399315703944790858949719959332860333945160309806923355862638188558244920820648066211393625740085316466320296887718941680168441974983820667691895030331731074144814773905175105621806973806547686889925506930458256319428024613624176981751532811832248821143132985247260880901610973585854989083196291051918738972735975194046518505923030765424793331163276880636463020085396826129557017329614735013253485774110440029871110005899394836557
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3168e639c2bca9365f703cf2f35a4023c267759f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'step.nasa.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016effcb886c000004030047304502200d54940d729d2be8d16ceceeceda55d2cba53be91b3f2ef2668085ffb6a7d7d1022100d5e62ffcda3a8b6a293b1b767f64b4c94c636037fc8a968bbe3557f9e397d63c007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016effcb88610000040300473045022100cf0897021c6a5f5f810f5d0bc479d553bcf53f7586e6505643600a978053883602202ad09c405c66e9b2f747cff3858a1055b5bf928a0059a797743f25839a6b0a71
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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