www.perb.ny.gov

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:72:bc:30:95:a1:94:2b:e2:a6:34:13:fd:f7:9d:dd:7f:67 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.perb.ny.gov

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:72:bc:30:95:a1:94:2b:e2:a6:34:13:fd:f7:9d:dd:7f:67
Serial Number (int): 300379194752605120575008480232832948338535
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 02:5c:46:c4:10:01:cd:e1:32:f2:22:16:39:32:88:2e:c7:78:c7:b9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7a:95:18:b2:fe:d9:be:83:eb:99:c4:42:63:de:a2:76:8b:1c:c4:48
Fingerprint (sha256): 00:a9:ef:7c:04:66:82:56:a0:51:c4:21:00:11:ef:82:f1:4b:7a:fd:8c:2f:0b:14:56:16:9e:7a:59:73:ad:d9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.perb.ny.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.perb.ny.gov

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.perb.ny.gov

Other certificates including the domain name ny.gov

(limited to 100 certificates)
www.tax.ny.gov
*.justicecenter.ny.gov
5638059940904960-fe3.pantheonsite.io
mail.cityofjohnstown.ny.gov
r4a10.osc.ny.gov
*.health.ny.gov
www.ciris.ny.gov
carpepm.almonds.com
5697124062724096-fe2.pantheonsite.io
5767917874446336-fe1.pantheonsite.io
*.hcr.ny.gov
5645914630782976-fe1.pantheonsite.io
5752571553644544-fe2.pantheonsite.io
el.nyserda.ny.gov
cjc.ny.gov
www.rev.ny.gov
5767917874446336-fe1.pantheonsite.io
5638059940904960-fe3.pantheonsite.io
*.health.ny.gov
tracs2.otda.ny.gov
ocra.omh.ny.gov
it.uahs.arizona.edu
learn.apps.loopstart.net
sni.cloudflaressl.com
int.sfs.ny.gov
recovery.dhses.ny.gov
www.tax.ny.gov
www.tax.ny.gov
5638059940904960-fe3.pantheonsite.io
Appcenter1.esd.ny.gov
5202656289095680-fe4.pantheonsite.io
5752571553644544-fe2.pantheonsite.io
*.hcr.ny.gov
www.perb.ny.gov
*.hcr.ny.gov
*.oagtest.ag.ny.gov
qasc.oft.ny.gov
bonds.hcr.ny.gov
*.opwdd.ny.gov
*.health.ny.gov
doccs-ndid.digital-dev.dmv.ny.gov
calendar.sdzsafaripark.org
devwebcloud.health.ny.gov
www.oscar.ny.gov
www.rev.ny.gov
dev.ag.ny.gov
youthworks.ny.gov
steuben911.ny.gov
APPS.OCFS.NY.GOV
recovery.dhses.ny.gov
mhprovider.qa.omh.ny.gov
vhc.wcb.ny.gov
*.dos.ny.gov
banking-business-review.com
cdn-test.battlefields.org
5752571553644544-fe2.pantheonsite.io
WestchesterCDPS.ny.gov
*.omh.ny.gov
GardenCity.ny.gov
citeak.multidevcom.uaf.edu
qa.my.ny.gov
booking.virtualhometour.sg
portwashingtonpd.ny.gov
r5a20.osc.ny.gov
fulton.ny.gov
ertfin.sfs.ny.gov
*.criminaljustice.ny.gov
cortlandcounty.ny.gov
uihp2.labor.ny.gov
5697124062724096-fe2.pantheonsite.io
hcstgbi.osc.ny.gov
applications.labor.ny.gov
www2.dps.ny.gov
DOCCS-Submetering.BMS.ny.gov
chns120.courseresource.yale.edu
my.justicecenter.ny.gov
*.dec.ny.gov
bonds.hcr.ny.gov
*.troopers.ny.gov
5202656289095680-fe4.pantheonsite.io
vpcr-qa.justicecenter.ny.gov
data.ny.gov
ccf.ny.gov
*.ocfs.ny.gov
vhc.wcb.ny.gov
dmna.ny.gov
qa-ldap.ny.gov
pay-92qanyspows.osc.ny.gov
online.ogs.ny.gov
nystateofhealth.ny.gov
5202656289095680-fe4.pantheonsite.io
www7f.tax.ny.gov
labor.ny.gov
allegany.ny.gov
vpn3.dfs.ny.gov
RAVPN.FRG.NY.GOV
qasc.oft.ny.gov
sni.cloudflaressl.com
ihstgi.osc.ny.gov
*.budget.ny.gov

Certificate

The complete raw certificate details for www.perb.ny.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVjCCBT6gAwIBAgISA3K8MJWhlCvipjQT/fed3X9nMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMjMxOTI5NTVaFw0y
MDA0MjIxOTI5NTVaMBoxGDAWBgNVBAMTD3d3dy5wZXJiLm55LmdvdjCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBALo479evhHRHiXQk6XGK0lLlxYgEDBER
V67JIGB/AH5dHsjJ6LIME9IR0rpY26evCEBR7qmDcx8YcF4AfT0ZvKzvSRMl3kmf
GDHArL2QF+VWG+ZN8wC8p9W/feLYOQs0g5mLwW234CJLOKCcW0q5UwjnjAuoM69n
YsvfIpdLjWGEvv6d2Wrxr0lN4x2lVYYCm10XV2VEjFOQn/ZfCsYRq4toU89h1QQW
cr6ZYIjlQ6E9+lyaxA1L2wLEqfBiIlZRyY6FO7JKw2yLQE2ZYPOlC5t2bTkkr0cj
3odOkUKHmO42jJJgmMx/vojCeCWgcOIVAaxMZnZjqflp59gKgKmw4+JP8BoVmuDI
plGo7QSCwJkdc2aS2j8onq9+1b9cBfV9x7cOGB2eldCx4fTUh+zzkb/hXPgzWJzd
cVtsGvNdyzgQBQE7uSlwb46aNluDE40nVRPHVFRe8E4oZy87/qx4xPKDENR0L3vG
jlmgq9lOeWVGpcAV1HPNEEBq9fPdZvRCpXG3v6b3SaLW5aFyQ3pMVxc+SJGY2vZC
kuxgLRC8UsMG62QsrINlrOkOnisb8cb1nzc3hjaGFN6iSbRf8HNFqNtlS5gC56fR
B/y2UE+wSVLf78qf5t2Zb7dltuavq10Sl0Yp5PRnf4geiWvFHjayTyjJTtVv/aFj
9Yt87yT3mieBAgMBAAGjggJkMIICYDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFAJc
RsQQAc3hMvIiFjkyiC7HeMe5MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPd3d3LnBlcmIubnkuZ292
MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH
AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB
9QSB8gDwAHYAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFv1BjW
PQAABAMARzBFAiEAkPl3IMpbd2mcL4gJ7T2maFFvnHNzXKxS55gQMUPR1aECIB6R
ncVy/TZyLF03eO3YxyrfX2TnRA3gvLmcKdnSP5RxAHYAb1N2rDHwMRnYmQCkURX/
dxUcEdkCwQApBo2yCJo32RMAAAFv1BjWhQAABAMARzBFAiBvMxFrE/o7mt5NR7K8
MYGICw/WqSXUKlxMVWLFj/UFxwIhALyXRVIOUL3Qd8wmawe6eATgAPyGZcqruU1m
+6jgoTr0MA0GCSqGSIb3DQEBCwUAA4IBAQB7sMwKHB1Wwuu8rYMb0+VVvQw7IKjk
2u+QApINHegVFSW6D+sQdAeK64wOOqUI7ze97E8gOBmIJrl8Zq0WRxci1MkVWKBo
NAX9eQVamre7ov8y1092kjhxoa5K8K4R4SFCJZA8Sme9Hpm2aqr4dzQ5Wz0TfDNe
iijqMgrDzWILKBbD1dlnOfC9dSeHZ+vTT3SRdrMb4FZHWyUi31XAej9PB6LEoCjg
Q3e8gUA50whUP4+CRQbn/QCRsbhnDlzgdtCerNZQHt1mqa8K0dNNTp7gCuMqVHXv
h3AwsfCtLW9A8ezyJDxzmhIvqWzVw4amLo61N1bCmdLOt5yN3ByeIYjI
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300379194752605120575008480232832948338535
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-23 19:29:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-22 19:29:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.perb.ny.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 759721149091334062764359050299403830002805496858414751574227204649807212395709832314666697523910904409714684669223743249057225712634052988478186901438116354556311791842706633993330993125584746306109058341274949787343414511973200728203770594087678423206298371067390363700483709539916252440553374793398553786660384845977989500769684255291743591784725687012430901971669659698152724069575688325234138005846614975189512408731307657253059474011252194001986942579685755237706533176722800203166578135604774042768679825530669489519051431038958270060284476033491991265356270340275341512638244847180964800038905720798982956581163957955767255224724967902445424517293037496142695548375527423308998494713979138222283751660274054323131839385588791482071023411783182862153825745472571425656191444262067032733047776876319984199618239493085300960558220066888241358140838273749484814950406242643785466021173219149490927014389997150370392981287932579453872150705042445011141174371248631857989735799934807153570545708238525745193520171376110796266736103382448504058046097046984283587788937949535673590191863162678896155282743435204459013286556772241074803703907087924210058752079496562603418047582628703418666308741649116383911801275410711491279821875073
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							025c46c41001cde132f222163932882ec778c7b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perb.ny.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fd418d63d000004030047304502210090f97720ca5b77699c2f8809ed3da668516f9c73735cac52e798103143d1d5a102201e919dc572fd36722c5d3778edd8c72adf5f64e7440de0bcb99c29d9d23f94710076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016fd418d685000004030047304502206f33116b13fa3b9ade4d47b2bc3181880b0fd6a925d42a5c4c5562c58ff505c7022100bc9745520e50bdd077cc266b07ba7804e000fc8665caabb94d66fba8e0a13af4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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