crt07.prd-letsencrypt.publish.illinois.edu

Issued by R3

About this certificate

This digital certificate with serial number 04:e2:2a:d6:54:37:7f:6e:67:20:81:1b:85:7f:5c:da:f8:6e was issued on by Let's Encrypt.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=crt07.prd-letsencrypt.publish.illinois.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:e2:2a:d6:54:37:7f:6e:67:20:81:1b:85:7f:5c:da:f8:6e
Serial Number (int): 425409899086643165959108394046777273809006
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e3:0c:cd:36:c0:42:9e:59:5e:a4:f1:02:1d:fc:6e:f1:b7:7f:f0:4c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 06:d3:55:56:5d:5c:b1:4b:69:aa:83:f5:7d:ad:22:c7:dd:7c:37:8c
Fingerprint (sha256): 00:70:fb:b5:27:b7:d0:6c:f7:b3:83:d7:a4:61:f0:67:c6:aa:34:79:d2:75:19:83:de:e6:17:bf:c8:ea:a8:95

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate crt07.prd-letsencrypt.publish.illinois.edu

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for crt07.prd-letsencrypt.publish.illinois.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abc.npre.illinois.edu
acoustics.ae.illinois.edu
annelid.inhs.illinois.edu
apl.shs.illinois.edu
awards.aces.illinois.edu
beviercafe.illinois.edu
bodony.ae.illinois.edu
card.ahs.illinois.edu
ccrs.illinois.edu
chamorro.mechse.illinois.edu
climatecomputer.ncsa.illinois.edu
comm9revisions.illinois.edu
conservation-genetics.inhs.illinois.edu
create.ace.illinois.edu
crt07.prd-letsencrypt.publish.illinois.edu
cummings.inhs.illinois.edu
diversity.ahs.illinois.edu
dndlab.shs.illinois.edu
ece476.ece.illinois.edu
edream.illinois.edu
evans.aces.illinois.edu
evanscenter.aces.illinois.edu
geochemistry.isgs.illinois.edu
globalstrategy.illinois.edu
howdoesculturemove.slcl.illinois.edu
human-dimensions.inhs.illinois.edu
i-farm.illinois.edu
iccn.illinois.edu
icsg.csl.illinois.edu
iirer.ahs.illinois.edu
iml.math.illinois.edu
interfolio.illinois.edu
iobt-cra.org
ipi.illinois.edu
kaskaskia-bio-station.inhs.illinois.edu
kriven.matse.illinois.edu
lait.ncsa.illinois.edu
lake-michigan.inhs.illinois.edu
link-group.chemistry.illinois.edu
littlebeats.hdfs.illinois.edu
maslov.bioengineering.illinois.edu
mavis.grainger.illinois.edu
mckjohnson.nres.illinois.edu
merouehlab.life.illinois.edu
mfp.kch.illinois.edu
microbes.nres.illinois.edu
mjwetzel.inhs.illinois.edu
newfrontiers.illinois.edu
nfi.illinois.edu
nomenclatura-oligochaetologica.inhs.illinois.edu
oncare.cs.illinois.edu
ope.provost.illinois.edu
phillips-herpetology.inhs.illinois.edu
pie-letsencrypt-test.web.illinois.edu
powerofplay.ahs.illinois.edu
scholarsatrisk.illinois.edu
securewater.illinois.edu
sexualmisconductsurvey.illinois.edu
showcase.medicine.illinois.edu
snowglobe.illinois.edu
soyface.illinois.edu
spi2.illinois.edu
spicebox.illinois.edu
stream-ecology.inhs.illinois.edu
studentconference.csl.illinois.edu
systemdesign.illinois.edu
tap.istc.illinois.edu
teachingeval.illinois.edu
tiemann.inhs.illinois.edu
tollway.prairie.illinois.edu
tqc2022-conference.iquist.illinois.edu
tsc.inhs.illinois.edu
united.illinois.edu
wang.physics.illinois.edu
washington.illinois.edu
wim.mechse.illinois.edu
www.beviercafe.illinois.edu
www.comm9revisions.illinois.edu
www.edream.illinois.edu
www.interfolio.illinois.edu
www.iobt-cra.org
www.lifehome.ahs.illinois.edu
www.newfrontiers.illinois.edu
www.scholarsatrisk.illinois.edu
www.securewater.illinois.edu
www.snowglobe.illinois.edu
www.soyface.illinois.edu
www.spicebox.illinois.edu
www.systemdesign.illinois.edu
www.teachingeval.illinois.edu
www.washington.illinois.edu
yunes-gravity-theory-group.physics.illinois.edu

Other certificates including the domain name illinois.edu

(limited to 100 certificates)
sandratest.web.illinois.edu
charans2.web.illinois.edu
demosite1.test.web.illinois.edu
tls.automattic.com
trubach.dev.web.illinois.edu
rgonig2.web.illinois.edu
clacs.illinois.edu
atlasweb16dev.ad.uillinois.edu
acounttestcp.web.illinois.edu
schrage4.web.illinois.edu
jakramer4321.dev.web.illinois.edu
preview.housing.illinois.edu
prd-crt01.publish.illinois.edu
sswdirectory.test.web.illinois.edu
us.prod.campusgroups.com
formalmethods.web.engr.illinois.edu
nbatura.web.illinois.edu
secure.aces.illinois.edu
jhd2.web.illinois.edu
wennebo1.test.web.illinois.edu
oea.illinois.edu
itprosbutler1cus.dev.web.illinois.edu
vassily2.web.engr.illinois.edu
torrellas.web.illinois.edu
ywang298.web.engr.illinois.edu
ics-test.sbutler1.dev.web.illinois.edu
auditorymodels.web.engr.illinois.edu
fin580.business.illinois.edu
ie07.ncsa.illinois.edu
amberg4.web.illinois.edu
gargoyle.uni.illinois.edu
employment.web.illinois.edu
itprobinaldscus.web.illinois.edu
dxl.ncsa.illinois.edu
sbutler1.test.web.illinois.edu
crt07.prd-letsencrypt.publish.illinois.edu
cluster3.technolutions.net
netmath.illinois.edu
uawasth2.web.illinois.edu
mcarrasco.web.illinois.edu
mail.mste.illinois.edu
distributedmuseum.illinois.edu
jzcapaprod.web.illinois.edu
plusc1cus.dev.web.illinois.edu
wmsjdees1.web.illinois.edu
cbitraining.web.illinois.edu
caesar.web.engr.illinois.edu
5635093192245248-fe3.pantheonsite.io
cloudbroker-qa.cites.illinois.edu
cluster3.technolutions.net
web.illinois.edu
its-repo.ncsa.illinois.edu
contextual.web.illinois.edu
faa.illinois.edu
bretl.csl.illinois.edu
nextcourses.illinois.edu
us.prod.campusgroups.com
my.lis.illinois.edu
stuckexchange.web.illinois.edu
ldap3.ncsa.illinois.edu
pts.learn.illinois.edu
nikhilm3.web.illinois.edu
studentcode.illinois.edu
test.english.illinois.edu
petgooooo.web.illinois.edu
web.engr.illinois.edu
meganlm2.web.illinois.edu
tuncay2.test.web.illinois.edu
sse.illinois.edu
mail.opia.illinois.edu
cthulhu.cropsciences.illinois.edu
tbp.ec.illinois.edu
pubsplus.illinois.edu
autotestdrupal.web.illinois.edu
itproklangcus.dev.web.illinois.edu
test.frit.illinois.edu
itproklangcus.web.illinois.edu
cspurce2.web.illinois.edu
vetmed.illinois.edu
sbutler1.web.illinois.edu
teamrockettest.test.web.illinois.edu
eohlive2018.web.engr.illinois.edu
mr-dev.atlas.illinois.edu
psaap.anthro.illinois.edu
site-maint.itcs.illinois.edu
etdtest.ideals.illinois.edu
demosite2.test.web.illinois.edu
peterarest.web.illinois.edu
gvserver.inhs.illinois.edu
illinilarp.web.illinois.edu
jmeid2.web.illinois.edu
wiki.cigi.illinois.edu
cgs.illinois.edu
images.publicaffairs.illinois.edu
tulshib2.web.engr.illinois.edu
jakemullen.web.illinois.edu
crt05.prd-letsencrypt.publish.illinois.edu
isws-data.web.illinois.edu
baylislab.ace.illinois.edu
researchpark.illinois.edu

Certificate

The complete raw certificate details for crt07.prd-letsencrypt.publish.illinois.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPLTCCDhWgAwIBAgISBOIq1lQ3f25nIIEbhX9c2vhuMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA1MjQyMDA3MTBaFw0yNDA4MjIyMDA3MDlaMDUxMzAxBgNVBAMT
KmNydDA3LnByZC1sZXRzZW5jcnlwdC5wdWJsaXNoLmlsbGlub2lzLmVkdTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIuGQDmIhefaDIcqXIahH/6itMEn
OEkkPBLbTcRPPmkb81UXfLTRDZStf0tSC9MKXGuNtkPOTufY2b15SatX03FIr3VG
FVpoMtTr0pkY3jGRM0cV4bVK8Sh3t0nK9rO4I9OFepoluUUb5Xzw+DA9xmbNrpVL
vjXj+ke6u9NbXjsqnjOdE8/udyG+PXYuGUUw4iQNZ4Bi0fy4rZqKP20iS8vOQPlL
WymcboUc9lzQc7W/lYtTcu6pH1I74zfkCyz7/HyNMf9WwLNKk9TnwuZZ68tvpcLG
bxDVX5aA0/DCTOakzWeoJ7MCAa8EvzvwnwCF6sBqOhVWrHcQQwJnPZ3+SHUCAwEA
AaOCDDgwggw0MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU4wzNNsBCnllepPECHfxu
8bd/8EwwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUH
AQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYB
BQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggo/BgNVHREEggo2MIIKMoIV
YWJjLm5wcmUuaWxsaW5vaXMuZWR1ghlhY291c3RpY3MuYWUuaWxsaW5vaXMuZWR1
ghlhbm5lbGlkLmluaHMuaWxsaW5vaXMuZWR1ghRhcGwuc2hzLmlsbGlub2lzLmVk
dYIYYXdhcmRzLmFjZXMuaWxsaW5vaXMuZWR1ghdiZXZpZXJjYWZlLmlsbGlub2lz
LmVkdYIWYm9kb255LmFlLmlsbGlub2lzLmVkdYIVY2FyZC5haHMuaWxsaW5vaXMu
ZWR1ghFjY3JzLmlsbGlub2lzLmVkdYIcY2hhbW9ycm8ubWVjaHNlLmlsbGlub2lz
LmVkdYIhY2xpbWF0ZWNvbXB1dGVyLm5jc2EuaWxsaW5vaXMuZWR1ghtjb21tOXJl
dmlzaW9ucy5pbGxpbm9pcy5lZHWCJ2NvbnNlcnZhdGlvbi1nZW5ldGljcy5pbmhz
LmlsbGlub2lzLmVkdYIXY3JlYXRlLmFjZS5pbGxpbm9pcy5lZHWCKmNydDA3LnBy
ZC1sZXRzZW5jcnlwdC5wdWJsaXNoLmlsbGlub2lzLmVkdYIaY3VtbWluZ3MuaW5o
cy5pbGxpbm9pcy5lZHWCGmRpdmVyc2l0eS5haHMuaWxsaW5vaXMuZWR1ghdkbmRs
YWIuc2hzLmlsbGlub2lzLmVkdYIXZWNlNDc2LmVjZS5pbGxpbm9pcy5lZHWCE2Vk
cmVhbS5pbGxpbm9pcy5lZHWCF2V2YW5zLmFjZXMuaWxsaW5vaXMuZWR1gh1ldmFu
c2NlbnRlci5hY2VzLmlsbGlub2lzLmVkdYIeZ2VvY2hlbWlzdHJ5LmlzZ3MuaWxs
aW5vaXMuZWR1ghtnbG9iYWxzdHJhdGVneS5pbGxpbm9pcy5lZHWCJGhvd2RvZXNj
dWx0dXJlbW92ZS5zbGNsLmlsbGlub2lzLmVkdYIiaHVtYW4tZGltZW5zaW9ucy5p
bmhzLmlsbGlub2lzLmVkdYITaS1mYXJtLmlsbGlub2lzLmVkdYIRaWNjbi5pbGxp
bm9pcy5lZHWCFWljc2cuY3NsLmlsbGlub2lzLmVkdYIWaWlyZXIuYWhzLmlsbGlu
b2lzLmVkdYIVaW1sLm1hdGguaWxsaW5vaXMuZWR1ghdpbnRlcmZvbGlvLmlsbGlu
b2lzLmVkdYIMaW9idC1jcmEub3JnghBpcGkuaWxsaW5vaXMuZWR1gidrYXNrYXNr
aWEtYmlvLXN0YXRpb24uaW5ocy5pbGxpbm9pcy5lZHWCGWtyaXZlbi5tYXRzZS5p
bGxpbm9pcy5lZHWCFmxhaXQubmNzYS5pbGxpbm9pcy5lZHWCH2xha2UtbWljaGln
YW4uaW5ocy5pbGxpbm9pcy5lZHWCIWxpbmstZ3JvdXAuY2hlbWlzdHJ5LmlsbGlu
b2lzLmVkdYIdbGl0dGxlYmVhdHMuaGRmcy5pbGxpbm9pcy5lZHWCIm1hc2xvdi5i
aW9lbmdpbmVlcmluZy5pbGxpbm9pcy5lZHWCG21hdmlzLmdyYWluZ2VyLmlsbGlu
b2lzLmVkdYIcbWNram9obnNvbi5ucmVzLmlsbGlub2lzLmVkdYIcbWVyb3VlaGxh
Yi5saWZlLmlsbGlub2lzLmVkdYIUbWZwLmtjaC5pbGxpbm9pcy5lZHWCGm1pY3Jv
YmVzLm5yZXMuaWxsaW5vaXMuZWR1ghptandldHplbC5pbmhzLmlsbGlub2lzLmVk
dYIZbmV3ZnJvbnRpZXJzLmlsbGlub2lzLmVkdYIQbmZpLmlsbGlub2lzLmVkdYIw
bm9tZW5jbGF0dXJhLW9saWdvY2hhZXRvbG9naWNhLmluaHMuaWxsaW5vaXMuZWR1
ghZvbmNhcmUuY3MuaWxsaW5vaXMuZWR1ghhvcGUucHJvdm9zdC5pbGxpbm9pcy5l
ZHWCJnBoaWxsaXBzLWhlcnBldG9sb2d5LmluaHMuaWxsaW5vaXMuZWR1giVwaWUt
bGV0c2VuY3J5cHQtdGVzdC53ZWIuaWxsaW5vaXMuZWR1ghxwb3dlcm9mcGxheS5h
aHMuaWxsaW5vaXMuZWR1ghtzY2hvbGFyc2F0cmlzay5pbGxpbm9pcy5lZHWCGHNl
Y3VyZXdhdGVyLmlsbGlub2lzLmVkdYIjc2V4dWFsbWlzY29uZHVjdHN1cnZleS5p
bGxpbm9pcy5lZHWCHnNob3djYXNlLm1lZGljaW5lLmlsbGlub2lzLmVkdYIWc25v
d2dsb2JlLmlsbGlub2lzLmVkdYIUc295ZmFjZS5pbGxpbm9pcy5lZHWCEXNwaTIu
aWxsaW5vaXMuZWR1ghVzcGljZWJveC5pbGxpbm9pcy5lZHWCIHN0cmVhbS1lY29s
b2d5LmluaHMuaWxsaW5vaXMuZWR1giJzdHVkZW50Y29uZmVyZW5jZS5jc2wuaWxs
aW5vaXMuZWR1ghlzeXN0ZW1kZXNpZ24uaWxsaW5vaXMuZWR1ghV0YXAuaXN0Yy5p
bGxpbm9pcy5lZHWCGXRlYWNoaW5nZXZhbC5pbGxpbm9pcy5lZHWCGXRpZW1hbm4u
aW5ocy5pbGxpbm9pcy5lZHWCHHRvbGx3YXkucHJhaXJpZS5pbGxpbm9pcy5lZHWC
JnRxYzIwMjItY29uZmVyZW5jZS5pcXVpc3QuaWxsaW5vaXMuZWR1ghV0c2MuaW5o
cy5pbGxpbm9pcy5lZHWCE3VuaXRlZC5pbGxpbm9pcy5lZHWCGXdhbmcucGh5c2lj
cy5pbGxpbm9pcy5lZHWCF3dhc2hpbmd0b24uaWxsaW5vaXMuZWR1ghd3aW0ubWVj
aHNlLmlsbGlub2lzLmVkdYIbd3d3LmJldmllcmNhZmUuaWxsaW5vaXMuZWR1gh93
d3cuY29tbTlyZXZpc2lvbnMuaWxsaW5vaXMuZWR1ghd3d3cuZWRyZWFtLmlsbGlu
b2lzLmVkdYIbd3d3LmludGVyZm9saW8uaWxsaW5vaXMuZWR1ghB3d3cuaW9idC1j
cmEub3Jngh13d3cubGlmZWhvbWUuYWhzLmlsbGlub2lzLmVkdYIdd3d3Lm5ld2Zy
b250aWVycy5pbGxpbm9pcy5lZHWCH3d3dy5zY2hvbGFyc2F0cmlzay5pbGxpbm9p
cy5lZHWCHHd3dy5zZWN1cmV3YXRlci5pbGxpbm9pcy5lZHWCGnd3dy5zbm93Z2xv
YmUuaWxsaW5vaXMuZWR1ghh3d3cuc295ZmFjZS5pbGxpbm9pcy5lZHWCGXd3dy5z
cGljZWJveC5pbGxpbm9pcy5lZHWCHXd3dy5zeXN0ZW1kZXNpZ24uaWxsaW5vaXMu
ZWR1gh13d3cudGVhY2hpbmdldmFsLmlsbGlub2lzLmVkdYIbd3d3Lndhc2hpbmd0
b24uaWxsaW5vaXMuZWR1gi95dW5lcy1ncmF2aXR5LXRoZW9yeS1ncm91cC5waHlz
aWNzLmlsbGlub2lzLmVkdTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB
1nkCBAIEgfUEgfIA8AB3AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/KIXs+GRu
AAABj6xt1pUAAAQDAEgwRgIhANgk7vJhF3316lkgdHAMHolAUN1vyZPijcwilRQn
ti7oAiEAtiynyrC7Jmy9f0Mq31WjkFEJT9rv02YasaaCh5AcsLIAdQB2/4g/Crb7
lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAY+sbdbDAAAEAwBGMEQCIHK2ZDqK
jfvbQCSeThsohPZZXNZ9N9Sd1b6akWbhpP5IAiBbzHqsA5PRpaD6p7ZMG1GZiAzO
30EaPQZQ8k/+/r8CVzANBgkqhkiG9w0BAQsFAAOCAQEAqlsrOMN0yl90bWBmiRka
O5CD+/JTl8O+DZp7OLEI+neETTJoJb0RFIjtQsDqsKF/An5tEaZ3KrmaDcLCs8sV
KIEDjR/dMiWF2g2JBwqeP6pboBTn1R0nWapvu423q6nZuZ6hU26LNVTLPA2w9F8c
MrQRZtsrcyGtsUZNKoN+V35uhCOl3W1dN69rWi9h5pMUww4lRSwdaJn8kgSn+vxY
RWWhzgw30S47k0N4h8MaWybLJ4bV8vnQSvUx0bgneGzHUM/F2OCN6A82OeMD5n04
CI0A6KOAsa+GAk+7Q8112iUoWkK5C3YKM8mLF5JbK9Bz6Hs2kKhRFpHO9ZcrC3cT
Aw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4ZAOYiF59oMhypchqEf
/qK0wSc4SSQ8EttNxE8+aRvzVRd8tNENlK1/S1IL0wpca422Q85O59jZvXlJq1fT
cUivdUYVWmgy1OvSmRjeMZEzRxXhtUrxKHe3Scr2s7gj04V6miW5RRvlfPD4MD3G
Zs2ulUu+NeP6R7q701teOyqeM50Tz+53Ib49di4ZRTDiJA1ngGLR/Litmoo/bSJL
y85A+UtbKZxuhRz2XNBztb+Vi1Ny7qkfUjvjN+QLLPv8fI0x/1bAs0qT1OfC5lnr
y2+lwsZvENVfloDT8MJM5qTNZ6gnswIBrwS/O/CfAIXqwGo6FVasdxBDAmc9nf5I
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 425409899086643165959108394046777273809006
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-24 20:07:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-22 20:07:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'crt07.prd-letsencrypt.publish.illinois.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17613325965535410671111633886512158574569517025244050710960221433735337634621267782165535649183582705500204335829391358451591741317588825241951574887809357483462586215685000469604959093552827261077278437606944912903765658471695462050067171752031694716680561709071620268586700820428260381170227116784867190751853592700063176115415584305550019300639377990379087419559169081821938760258441022331812748090710717360765298420368059557783593172980785238585836058579473068032990816843549965324014098449813254848292184359358361417600510536116701138089415371342055103911224594984963721653181114699773279554252216077594134464629
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e30ccd36c0429e595ea4f1021dfc6ef1b77ff04c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2614 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abc.npre.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acoustics.ae.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annelid.inhs.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apl.shs.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awards.aces.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beviercafe.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bodony.ae.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'card.ahs.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccrs.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chamorro.mechse.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'climatecomputer.ncsa.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comm9revisions.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conservation-genetics.inhs.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'create.ace.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crt07.prd-letsencrypt.publish.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cummings.inhs.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diversity.ahs.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dndlab.shs.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ece476.ece.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edream.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evans.aces.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evanscenter.aces.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geochemistry.isgs.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalstrategy.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howdoesculturemove.slcl.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'human-dimensions.inhs.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-farm.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iccn.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icsg.csl.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iirer.ahs.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iml.math.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interfolio.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iobt-cra.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipi.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaskaskia-bio-station.inhs.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kriven.matse.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lait.ncsa.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lake-michigan.inhs.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link-group.chemistry.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'littlebeats.hdfs.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maslov.bioengineering.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mavis.grainger.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mckjohnson.nres.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merouehlab.life.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfp.kch.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microbes.nres.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mjwetzel.inhs.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newfrontiers.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nfi.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nomenclatura-oligochaetologica.inhs.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oncare.cs.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ope.provost.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phillips-herpetology.inhs.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pie-letsencrypt-test.web.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powerofplay.ahs.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scholarsatrisk.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securewater.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sexualmisconductsurvey.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showcase.medicine.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snowglobe.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soyface.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spi2.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spicebox.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stream-ecology.inhs.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studentconference.csl.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'systemdesign.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tap.istc.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teachingeval.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiemann.inhs.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tollway.prairie.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tqc2022-conference.iquist.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsc.inhs.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'united.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wang.physics.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washington.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wim.mechse.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beviercafe.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comm9revisions.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edream.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.interfolio.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iobt-cra.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifehome.ahs.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newfrontiers.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scholarsatrisk.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.securewater.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snowglobe.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soyface.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spicebox.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.systemdesign.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teachingeval.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.washington.illinois.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yunes-gravity-theory-group.physics.illinois.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018fac6dd6950000040300483046022100d824eef261177df5ea592074700c1e894050dd6fc993e28dcc22951427b62ee8022100b62ca7cab0bb266cbd7f432adf55a39051094fdaefd3661ab1a68287901cb0b200750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018fac6dd6c30000040300463044022072b6643a8a8dfbdb40249e4e1b2884f6595cd67d37d49dd5be9a9166e1a4fe4802205bcc7aac0393d1a5a0faa7b64c1b5199880ccedf411a3d0650f24ffefebf0257
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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