cslive.csi.cuny.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b4:27:a3:b9:ef:06:43:c3:3c:ef:01:70:7a:7f:23:03:ee was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cslive.csi.cuny.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b4:27:a3:b9:ef:06:43:c3:3c:ef:01:70:7a:7f:23:03:ee
Serial Number (int): 322640373848456462605768365131359259395054
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c4:be:c2:81:eb:ab:f9:c0:48:d1:ac:52:af:b4:f2:e5:6b:dc:8c:83
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c0:15:d4:51:1f:ad:c7:d0:f0:91:ab:c1:32:ea:8d:00:be:93:ad:b7
Fingerprint (sha256): 01:f2:1f:99:60:95:31:31:7c:f6:e7:52:ca:18:03:83:af:28:c6:16:cf:be:7f:17:54:ac:22:5a:b2:51:7c:8c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cslive.csi.cuny.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cslive.csi.cuny.edu

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cslive.csi.cuny.edu

Other certificates including the domain name cuny.edu

(limited to 100 certificates)
www.math.csi.cuny.edu
5684453372329984-fe2.pantheonsite.io
us.prod.campusgroups.com
*.gc.cuny.edu
*.csi.cuny.edu
ucdc.edu
csicampusnet.csi.cuny.edu
us.prod.campusgroups.com
guides.newman.baruch.cuny.edu
*.mhc.cuny.edu
mail.journalism.cuny.edu
eportfolios.macaulay.cuny.edu
libpapercut-vs.librarygp.citytech.cuny.edu
test.eis.uw.edu
qwifi.qc.cuny.edu
www.design-engineering.princeton.edu
5684453372329984-fe2.pantheonsite.io
nxterra.ucop.edu
ssa.ccny.cuny.edu
csi2-pps2.csi.cuny.edu
cslive.csi.cuny.edu
*.citytech.cuny.edu
mail.qc.cuny.edu
*.kbcc.cuny.edu
*.bmcc.cuny.edu
www.hcii.cs.cmu.edu
208.lsnc.net
5684453372329984-fe2.pantheonsite.io
*.citytech.cuny.edu
cunyba.us.reclaim.cloud
www.blogs.earthjustice.org
us.prod.campusgroups.com
qccommunity.qc.cuny.edu
*.citytech.cuny.edu
libcal.library.hunter.cuny.edu
5684453372329984-fe2.pantheonsite.io
library.citytech.cuny.edu
webdev.colorado.edu
virtual2.unlv.edu
5769928858664960-fe3.pantheonsite.io
5756915711737856-fe1.pantheonsite.io
mysite.qc.cuny.edu
*.york.ezproxy.cuny.edu
*.york.cuny.edu
5635703144710144-fe4.pantheonsite.io
upenn-it.asc.upenn.edu
*.qcc.cuny.edu
www.math.csi.cuny.edu
onesearch.cuny.edu
Collegiatelink4.Campuslabs.com
*.cuny.edu
csomlcms.cuny.edu
athletics.baruch.cuny.edu
senate.qc.cuny.edu
hub.meed.com
208.lsnc.net
webmail.exchtest.cuny.edu
*.cuny.edu
vision.cs.qc.cuny.edu
newmedialab.cuny.edu
dev.wellness.yale.edu
nml-jail.newmedialab.cuny.edu
qc.cuny.edu
*.gc.cuny.edu
go.journalism.cuny.edu
cunyba.cuny.edu
lib01.bcc.cuny.edu
hr.hunter.cuny.edu
live.ucdavis.edu
info-dev.calperformances.org
websql.brooklyn.cuny.edu
ldapmaint.ccny.cuny.edu
*.gc.cuny.edu
towa.tlehman.cuny.edu
ww2.hunter.cuny.edu
us.prod.campusgroups.com
libcal.library.hunter.cuny.edu
libcal.library.hunter.cuny.edu
good.gsm.cornell.edu
archivesspace.library.csi.cuny.edu
gold.cs.qc.cuny.edu
newlaborforum.cuny.edu
www.lgcr.com
cetls.bmcc.cuny.edu
pwdregister.bcc.cuny.edu
www.nai.arizona.edu
upenn-it.asc.upenn.edu
library.hunter.cuny.edu
mymail.baruch.cuny.edu
nistmep.blogs.govdelivery.com
spstime.sps.cuny.edu
*.cuny.edu
dev.embody.yale.edu
scalefunder.net
scalefunder.net
club.kjzz.org
cunyba.us.reclaim.cloud
help.brooklyn.cuny.edu
us.prod.campusgroups.com
asianamericanyc.hunter.cuny.edu

Certificate

The complete raw certificate details for cslive.csi.cuny.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF3jCCBMagAwIBAgISA7Qno7nvBkPDPO8BcHp/IwPuMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDA0MDgxMzAwMDhaFw0y
MDA3MDcxMzAwMDhaMB4xHDAaBgNVBAMTE2NzbGl2ZS5jc2kuY3VueS5lZHUwggGi
MA0GCSqGSIb3DQEBAQUAA4IBjwAwggGKAoIBgQC3ScKxpz/3k9OE0IXF6sMcWfvQ
xwJlhjDAKMj97Det27MMtjjdC+O/LyCS809Di8fZADZKETdZZj/j2IG8rCQPuw1i
wLJcQp+U+fO87qmpQSQtAJdSDw0twIAPS468fYtZJu0j0obDOZQgR7KXaBMSxrnc
ZPZ0JhDB+Gv6hKW60yp5xkQDIEnf/g4LZcmrp6FzSFbS9y9BnnJ7FtXLI6P5mqOs
gargKFGp7FGmja0Cp415Ew7DGyBk/zd7PzuqBDIopCz1puh3oWMmolMy3TTEog1o
IFm82zBOh7340ATC20afJZ1tk9AfFiFdHRaAMTNglebDOAtEG8Qvra9b2NaYWdoH
d7mKtSC4BBlHD6TrAvDZPTWyHj74dl9qOYLFI+uw6Sb/YiHBJzSvKs6xFADPT6pJ
LGrZ56/SwsWVVmQFJwz7QXmSGdYDJcJtNI4xiz9UrwaTfoL5/2fsaZVNyGV5jO6F
ZfluZ8I/T0oUSl3Q9iRZ1dvJztonglfcO4TVsYsCAwEAAaOCAmgwggJkMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQUxL7Cgeur+cBI0axSr7Ty5WvcjIMwHwYDVR0jBBgw
FoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUF
BzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUF
BzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAeBgNVHREE
FzAVghNjc2xpdmUuY3NpLmN1bnkuZWR1MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcG
CysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5
cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYA8JWkWfIA0YJAEC0vk4iO
rUv+HUfjmeHQNKawqKqOsnMAAAFxWhdN/wAABAMARzBFAiB9F1HbYn98Z1TktxsJ
JEmOjUJt6C7foJgd68bQ7dWSigIhAJic/syi49TsH00Lm33A3Hd+kF0W/loxvXXG
+YGXKWOgAHYAB7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFxWhdO
JgAABAMARzBFAiAl0Epa3Hmpcz/HxNVBXeXeyx7wi5uhCaJRP43tEBfojAIhALYo
b/Zrr5oUnXx83NCYKCkQd9bwmzdjqiXj8rcAOnHmMA0GCSqGSIb3DQEBCwUAA4IB
AQAjYjo/AZiN/xUR6JcMkErXCNSnH3MFOvqh0mKGuwRw2GXoN/a4z18EWO2nbE70
KyfgbG59YmdyjvruY1jZsae8LXNI8rRBz1xTnihIK2XH2MdG8YTOySfIXoXqFuTX
ViXC8ubTKEo9aZtrnHMS1aLgafWSbakfUoJLPv1jaPX3uhzLgtL283ltrKbrveUP
42SCVEjyiwZy/DnmGDFb5rf00u37Cv2CD1aGg6fP0jjEOzgRiNUk7WTj5JxprrF5
bPFmAIDxMpyBYd6Jj5itGRSKBL73tfgHn0Xvx97y1CooVL5g118PwHdiXoByt80v
YxwzpJvIpLTK/k4oddF7ogQO
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322640373848456462605768365131359259395054
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-08 13:00:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-07 13:00:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cslive.csi.cuny.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4159499225606218703863540952596545210091869033565901136294465453950871775286069109202702800370020238606073234632906766768268315960916349835081289789157570121534825151065688380997110791005174761063971721207217306636483070660472915875574891667445582433651693362287373518395333073042504346457813868088120816188201997748759369072970326119050496238423438262908199341524552958744382907658285651163714054340052818681494726632334502177376928198702826481915714372129409318237394925139946002387249235474036097353071907866916915157707618989722880331391333658955927085746651498696584551612267312640140596695860257053977106528675241485336162887919607818662170801054836235367222877415041237917377886627860252941758500866111821119270029871154595917532062495564946883576407294775769349079305390146462182645398507438371407381237879033651378157238902956320904721437761763028373605493428016495286926854935585461723491045761577605988005765820811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c4bec281ebabf9c048d1ac52afb4f2e56bdc8c83
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cslive.csi.cuny.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001715a174dff000004030047304502207d1751db627f7c6754e4b71b0924498e8d426de82edfa0981debc6d0edd5928a022100989cfecca2e3d4ec1f4d0b9b7dc0dc777e905d16fe5a31bd75c6f981972963a000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001715a174e260000040300473045022025d04a5adc79a9733fc7c4d5415de5decb1ef08b9ba109a2513f8ded1017e88c022100b6286ff66baf9a149d7c7cdcd09828291077d6f09b3763aa25e3f2b7003a71e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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