religionlab.virginia.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:0d:65:28:5e:53:90:de:d1:28:f3:b4:4c:fb:3b:67:50:b6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=religionlab.virginia.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0d:65:28:5e:53:90:de:d1:28:f3:b4:4c:fb:3b:67:50:b6
Serial Number (int): 353007276129629079950405107076757214154934
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: af:a3:99:25:97:62:a3:31:4e:19:90:62:ba:fe:90:81:4f:e9:fe:fb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): dd:cf:c0:2b:ce:c9:34:f2:1a:c1:50:48:e5:89:98:b6:dd:f8:fa:f9
Fingerprint (sha256): 00:d6:7d:1a:83:4c:92:9c:b9:89:32:b0:6c:3e:cc:a6:2a:4d:fb:9e:f9:28:8f:3e:f4:89:34:0a:b8:36:01:02

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate religionlab.virginia.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for religionlab.virginia.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

religionlab.virginia.edu

Other certificates including the domain name virginia.edu

(limited to 100 certificates)
5654645158445056-fe4.pantheonsite.io
5754903989321728-fe2.pantheonsite.io
gracula.psyc.virginia.edu
ei-mon2.its.virginia.edu
www.berg.evsc.virginia.edu
5654645158445056-fe4.pantheonsite.io
blog.radiology.virginia.edu
5645914630782976-fe1.pantheonsite.io
andvari.org
blogs.darden.virginia.edu
5641826627223552-fe3.pantheonsite.io
*.jiveon.com
clearpass.hscs.virginia.edu
schedule.hscs.virginia.edu
cluster3.technolutions.net
wtdc11.wintest.virginia.edu
mygroups.virginia.edu
cluster.technolutions.net
tammlab.medicine.virginia.edu
*.mail.virginia.edu
video.comm.virginia.edu
vanity7.jiveon.com
cluster3.technolutions.net
stacey-aruba-7240-1.hscs.virginia.edu
uvaclubs.virginia.edu
atmos.evsc.virginia.edu
csc.virginia.edu
jagienka.med.virginia.edu
religionlab.virginia.edu
calendar.virginia.edu
realestate.virginia.edu
satellite01.its.virginia.edu
blogs.darden.virginia.edu
mdm.healthsystem.virginia.edu
evscta.evsc.virginia.edu
climate.evsc.virginia.edu
falmouth.lib.virginia.edu
helpdesk.evsc.virginia.edu
uconnectlabs.com
hstsbitableau1.hscs.virginia.edu
eso.evsc.virginia.edu
banking-business-review.com
tableau.admin.virginia.edu
staffsenate.virginia.edu
securemail.healthsystem.virginia.edu
www.uva2021.virginia.edu
apply.darden.virginia.edu
HSTSXCONT2.HSCS.VIRGINIA.EDU
advancement.virginia.edu
hsts3parmgt.hscs.virginia.edu
hstsmdaudithosp.hscs.virginia.edu
uconnectlabs.com
proteindiffraction.org
network-setup.itc.virginia.edu
5645914630782976-fe1.pantheonsite.io
cluster3.technolutions.net
learn.med.virginia.edu
vanity22.jiveon.com
ascs10.clas.virginia.edu
tams.nursing.virginia.edu
HSCSEBLOB.HSCS.VIRGINIA.EDU
5754903989321728-fe2.pantheonsite.io
devhub.virginia.edu
guides.lib.virginia.edu
5754903989321728-fe2.pantheonsite.io
erode.evsc.virginia.edu
findtrees.blandy.virginia.edu
apply.darden.virginia.edu
apply.undergradadmission.virginia.edu
*.cs.virginia.edu
wsx.lab.voice.virginia.edu
208.lsnc.net
falmouth.internal.lib.virginia.edu
hstsepiccaret.hscs.virginia.edu
hstsscrubip1.hscs.virginia.edu
5641826627223552-fe3.pantheonsite.io
www.arch.virginia.edu
acs.evsc.virginia.edu
ships.internal.lib.virginia.edu
xsp-cs.lab.voice.virginia.edu
*.jiveon.com
www.apps.studyabroad.virginia.edu
at.virginia.edu
hydrology.evsc.virginia.edu
gembaadmittedqc2.darden.virginia.edu
helpdesk.evsc.virginia.edu
vmssqlrp.eservices.virginia.edu
equityatlas.lib.virginia.edu
bioreproducibility.org
libanswers.law.virginia.edu
learningtech.virginia.edu
madcap.virginia.edu
epiccarelink.healthsystem.virginia.edu
apply.darden.virginia.edu
vdi-vcenter-s.eservices.virginia.edu
gracula.psyc.virginia.edu
cluster.technolutions.net
gwpapers.virginia.edu
panopto.eservices.virginia.edu
upenn-it.asc.upenn.edu

Certificate

The complete raw certificate details for religionlab.virginia.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFajCCBFKgAwIBAgISBA1lKF5TkN7RKPO0TPs7Z1C2MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMDIyMDI5MDZaFw0y
MDAzMDEyMDI5MDZaMCMxITAfBgNVBAMTGHJlbGlnaW9ubGFiLnZpcmdpbmlhLmVk
dTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMHGYdVEu5KkoY8m7EM1
7F6AWeCVtBfD8pXqbhWcx+KS1Ha+kv9rHHthJDK3S78x52HeHBw7mEi4UI0e2bwU
KB4cOWPiWCae1SkQSfVnF9FFnXk8kuZEW48RBWv8ma2t0byPdma4hWqnSiTSQTsa
vjqnbEn/OiiZXT9NsP9vMDyN+f9DhCKV/3Sh8OxAEO0b4q+KhF9Hglo12nvbk6pm
/R6hDQBSxktdi/UxT6g79KT5ShQwaSJtliP+LDly0OvVThWUY/24a0q2pvsB+dih
ewowzQZcmYNRAWYENt551SQBHKAzE3WEKzTZUe6bEdLbeMVcTjsWpJydzBBhzrcn
D78CAwEAAaOCAm8wggJrMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUr6OZJZdiozFO
GZBiuv6QgU/p/vswHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI
KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0
c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0
c2VuY3J5cHQub3JnLzAjBgNVHREEHDAaghhyZWxpZ2lvbmxhYi52aXJnaW5pYS5l
ZHUwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEGBgorBgEEAdZ5AgQC
BIH3BIH0APIAdwDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAAAW7I
hFY2AAAEAwBIMEYCIQDi/difpnSsfCtsjOAYmZS/32io2hNtqoJWvJDVyYZ3pQIh
AKBX1AG0q//re5t/EjhYu/xk4+2pGBuYaCV+nQJ4tP6LAHcAsh4FzIuizYogTodm
+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFuyIRWKgAABAMASDBGAiEA7M2nOzgLOf2K
pV6ODcFhsqJvA5rneyYK8eLdVExS8TYCIQDqGzZyd3ueB3GvcIj7F8HezfamwA5Z
TQ+WgYDWByqkpTANBgkqhkiG9w0BAQsFAAOCAQEAK0Gr3EWeUgXgfrKarmMA4YzQ
ZYl1BIQ1sRg+B25CXk0AFo/1TBKiKfePjPJFqlgorlRsgAPEkwRwgu+VnDzRlTcJ
6b/c7ocJIIVznkLof1BJ4gTir9Qo4aN6EmzQQ0ohldRox3JzPl505fF9sTBJ0PvB
WEBSlbZfZhkJVj3BfXpBaoBY+ar5ZkFPMD6Nn5sqWLYAwL4VgHUwio65TJtlZZhj
AfPqO1WuFq3Je8TukVme3xPhf9iHsba6Rfrpgwss3Sk3uzQ8F1POsF1CVXCKV0dX
5p4/ut2oYKCGrqjD17DF7Quo0fAxsO5lozVZOTBH9MDLRQu5+qs7gs30oiGfjA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcZh1US7kqShjybsQzXs
XoBZ4JW0F8PylepuFZzH4pLUdr6S/2sce2EkMrdLvzHnYd4cHDuYSLhQjR7ZvBQo
Hhw5Y+JYJp7VKRBJ9WcX0UWdeTyS5kRbjxEFa/yZra3RvI92ZriFaqdKJNJBOxq+
OqdsSf86KJldP02w/28wPI35/0OEIpX/dKHw7EAQ7Rvir4qEX0eCWjXae9uTqmb9
HqENAFLGS12L9TFPqDv0pPlKFDBpIm2WI/4sOXLQ69VOFZRj/bhrSram+wH52KF7
CjDNBlyZg1EBZgQ23nnVJAEcoDMTdYQrNNlR7psR0tt4xVxOOxaknJ3MEGHOtycP
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 353007276129629079950405107076757214154934
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-02 20:29:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 20:29:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'religionlab.virginia.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24461818747797335128129862459683468360062389076173441055996792806592019358212526571673858122736997741107764866828516046908292484217527213926804678204434496299153456273962838573351629071842673469062674816261168555211979087680885939076110381806400490351377180360176210922483684496880718029030686541986608798444354422316275840776671812811230967954380017937602009076215855474363457838226628193685384816792814048347147492260242883524474923125994929460261229492190986212457189807950982002425794994840491609211464134427589787694820254856232104348648682115884745188459293778388507316151142218434926487191315830854472790642623
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							afa399259762a3314e199062bafe90814fe9fefb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'religionlab.virginia.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ec88456360000040300483046022100e2fdd89fa674ac7c2b6c8ce0189994bfdf68a8da136daa8256bc90d5c98677a5022100a057d401b4abffeb7b9b7f123858bbfc64e3eda9181b9868257e9d0278b4fe8b007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ec884562a0000040300483046022100eccda73b380b39fd8aa55e8e0dc161b2a26f039ae77b260af1e2dd544c52f136022100ea1b3672777b9e0771af7088fb17c1decdf6a6c00e594d0f968180d6072aa4a5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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