rki.feb.unair.ac.id

Issued by R3

About this certificate

This digital certificate with serial number 03:43:c6:73:ae:a7:ea:b7:04:f8:b5:47:5c:6f:97:84:82:34 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=rki.feb.unair.ac.id

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:43:c6:73:ae:a7:ea:b7:04:f8:b5:47:5c:6f:97:84:82:34
Serial Number (int): 284399564178730776764403335351341072810548
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bd:11:5f:e5:0e:70:52:63:66:e1:f8:05:c2:7d:25:02:89:32:b0:72
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b9:1c:ef:5b:65:05:16:53:f8:1d:eb:f5:d8:97:03:a0:8a:6f:d6:1f
Fingerprint (sha256): 02:68:c2:50:ef:28:35:8f:62:7e:32:e7:63:0e:70:52:0c:61:ad:df:5b:9e:d2:a5:f3:d6:6d:08:4d:a3:41:d5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate rki.feb.unair.ac.id

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rki.feb.unair.ac.id

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rki.feb.unair.ac.id

Other certificates including the domain name unair.ac.id

(limited to 100 certificates)
esertif.vokasi.unair.ac.id
pendidikan.unair.ac.id
aup.unair.ac.id
plp.unair.ac.id
kdv.fkh.unair.ac.id
icrl.vokasi.unair.ac.id
perpajakan.vokasi.unair.ac.id
kempo.ukm.unair.ac.id
magister.ikesor.fk.unair.ac.id
mm.feb.unair.ac.id
perkantoran.vokasi.unair.ac.id
info.unair.ac.id
biome.unair.ac.id
s1.fkh.unair.ac.id
fkh.blm.unair.ac.id
cpanelppjpi.unair.ac.id
ganjil.aula.unair.ac.id
ganjil2018.aula.unair.ac.id
lpm.unair.ac.id
kerohanianbudha.ukm.unair.ac.id
blm.unair.ac.id
perkantoran.vokasi.unair.ac.id
webdev.psikologi.unair.ac.id
spesialis1.urologi.fk.unair.ac.id
ppjpi.unair.ac.id
bem.unair.ac.id
ganjil2018.aula.unair.ac.id
fpsi.bem.unair.ac.id
akuntansi.vokasi.unair.ac.id
sicsb.stemcell.conference.unair.ac.id
feb.conference.unair.ac.id
seminar.fkh.unair.ac.id
ppjpi.unair.ac.id
d4fisioterapi.vokasi.unair.ac.id
asdsa.perbankan.vokasi.unair.ac.id
perhotelan.vokasi.unair.ac.id
alert.dsi.unair.ac.id
profesi.fkh.unair.ac.id
e-aup.unair.ac.id
iup.feb.unair.ac.id
igscps2018.ff.conference.unair.ac.id
kerohaniankristen.ukm.unair.ac.id
cpanel2.unair.ac.id
ispp.fk.conference.unair.ac.id
pemira.fkg.unair.ac.id
vokasi.unair.ac.id
fisip.conference.unair.ac.id
akreditasi.bpm.unair.ac.id
vaksinologi.fkh.unair.ac.id
international.unair.ac.id
aeec.unair.ac.id
pasca.unair.ac.id
dfc-med.fk.conference.unair.ac.id
sim.kemahasiswaan.unair.ac.id
fst.conference.unair.ac.id
bedah.rumahsakit.unair.ac.id
pariwisata.vokasi.unair.ac.id
bolavoli.ukm.unair.ac.id
olivia.vokasi.unair.ac.id
paduansuara.ukm.unair.ac.id
psikologi.bem.unair.ac.id
geliatairlangga.unair.ac.id
garudasakti.km.unair.ac.id
bem.unair.ac.id
futsal.ukm.unair.ac.id
sdgscenter.unair.ac.id
rki.feb.unair.ac.id
fisip.bem.unair.ac.id
beasiswa.unair.ac.id
bedah.rumahsakit.unair.ac.id
pendidikan.unair.ac.id
aula2.unair.ac.id
profile.unair.ac.id
iciebp.feb.conference.unair.ac.id
orchestra.ukm.unair.ac.id
aubmo.psdku.unair.ac.id
kms.fst.unair.ac.id
s3.manajemen.feb.unair.ac.id
ksr-pmi.ukm.unair.ac.id
satudata.unair.ac.id
sim.ners.unair.ac.id
vokasi.blm.unair.ac.id
sarpras.unair.ac.id
vaksinologi.fkh.unair.ac.id
beasiswa.unair.ac.id
sehat.unair.ac.id
d4radiologi.vokasi.unair.ac.id
perpustakaan.vokasi.unair.ac.id
klinik.fkh.unair.ac.id
icasmat.conference.unair.ac.id
pasca.unair.ac.id
profile.unair.ac.id
merpatiputih.ukm.unair.ac.id
isejarah.fib.unair.ac.id
kps.ukm.unair.ac.id
global.unair.ac.id
beta.unair.ac.id
orchestra.ukm.unair.ac.id
pramuka.ukm.unair.ac.id
infomawa.feb.unair.ac.id

Certificate

The complete raw certificate details for rki.feb.unair.ac.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF8zCCBNugAwIBAgISA0PGc66n6rcE+LVHXG+XhII0MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA5MDYyMzM1MjhaFw0yMzEyMDUyMzM1MjdaMB4xHDAaBgNVBAMT
E3JraS5mZWIudW5haXIuYWMuaWQwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK
AoICAQDcbwxHOY6KRnkThX5PzIRGcTXsQqgSuRC+Uh1q+PulUR9M/mOjgz7+GMud
dEFbqJFqcWNpqIBnNWv8RmMcicDsT0AfZdiqQepAib57sUj7BFnpdN1UJXGKWr6s
PI4M/szZ813u1arW5Cwybins8/gx1Iey1BpAQvMRyWY6BbD5RNbOs8uUjH7eHip7
6jEuUUDBVJaY6vFkxUPYRITP+H0ziewuqnlD5jmvUINHVOGxLUHSY9dsT00dtld1
2XHCZBPfMTgOYYblMCO7tb0rjCn+IX9jhIdCKdsVu/YPdNFo2TAXw0OUKoLsXngJ
WayOdPwwSf+9ilbR9FWdsm7PZcB4UJIEdQDnMVU/VRZZvSbyZZyh4oN23KMU20fD
X2CbpoMzCQksfUqn2ORq/iLBNn1uKNrozfuUnRv3M/EgwCTjk9DO0uJjuGv1AnRq
gMxQVvSeDmRnZgnu4WVS/q+ctPKOM5Hq10/oF32OB/d3m7S/4shCbx1M/hmq97WO
Vogogq9r4DPEKgfmjsS6zog3lYVnjseCYJaypys6jo1GtzBaO7Gtf4X0eowg1YL0
34aROyWicxLRvo3Z72Gm4kZ3RIzyVaVuORZ7JCzUBomE6PNwt25u4qIcqTAK4Krc
jBtyfMO6wZpTzBYnAyw++ELylJGc/NpBOufjMuBleMmBJQl7/QIDAQABo4ICFTCC
AhEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBS9EV/lDnBSY2bh+AXCfSUCiTKwcjAf
BgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcw
IQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYW
aHR0cDovL3IzLmkubGVuY3Iub3JnLzAeBgNVHREEFzAVghNya2kuZmViLnVuYWly
LmFjLmlkMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB
8gDwAHUAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGKbRC9kQAA
BAMARjBEAiBwLiqsDzfVvlhcK9sZJXMRyYWV5BMcNPWPvhKMVGb+WgIgOG7XT5Rl
NEAtpWG8lEZrrX4n+kjnHf5OtmCo5WalcbMAdwC3Pvsk35xNunXyOcW6WPRsXfxC
z3qfNcSeHQmBJe20mQAAAYptEL94AAAEAwBIMEYCIQDZ607FLlsJLYfriIkpC9Ra
cjszSwAub8W0Pmz6lJ3RmQIhAMJVkrEPAMdAV6ZoxGlEcjHvxva61r1+U/QS1oma
tJn8MA0GCSqGSIb3DQEBCwUAA4IBAQAxkzquhhX3A4y48uZvKqLmlKAOmARkcYeh
xagi4TTwIvq8XNPjXDuKxErU3ywdT4eret3N3giEX/whG2cW2V7s537I0+rS8sz+
WmvTuQHWdBq0ERYGOtoRUuT6Oc32TL6+ILxG9jTpzQWrYnjJ5FmCe9IoazabsZzx
k2+XiuqD4oaF78n2s+r27uVki2ybzk3Mz5ae3l3otc2KCdtRcbzQnhNhzyAWVnh4
GvAIPEvvDkwPjS+p7ooVe+OmjiWkXXKOwVuMNgE387/hHVnUdem24xPpiEhQUuFo
kU6rjTFUg/eaxi+DwBBfNzT785eD6xTjphyM0d8KKZtqbCloUFiF
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3G8MRzmOikZ5E4V+T8yE
RnE17EKoErkQvlIdavj7pVEfTP5jo4M+/hjLnXRBW6iRanFjaaiAZzVr/EZjHInA
7E9AH2XYqkHqQIm+e7FI+wRZ6XTdVCVxilq+rDyODP7M2fNd7tWq1uQsMm4p7PP4
MdSHstQaQELzEclmOgWw+UTWzrPLlIx+3h4qe+oxLlFAwVSWmOrxZMVD2ESEz/h9
M4nsLqp5Q+Y5r1CDR1ThsS1B0mPXbE9NHbZXddlxwmQT3zE4DmGG5TAju7W9K4wp
/iF/Y4SHQinbFbv2D3TRaNkwF8NDlCqC7F54CVmsjnT8MEn/vYpW0fRVnbJuz2XA
eFCSBHUA5zFVP1UWWb0m8mWcoeKDdtyjFNtHw19gm6aDMwkJLH1Kp9jkav4iwTZ9
bija6M37lJ0b9zPxIMAk45PQztLiY7hr9QJ0aoDMUFb0ng5kZ2YJ7uFlUv6vnLTy
jjOR6tdP6Bd9jgf3d5u0v+LIQm8dTP4Zqve1jlaIKIKva+AzxCoH5o7Eus6IN5WF
Z47HgmCWsqcrOo6NRrcwWjuxrX+F9HqMINWC9N+GkTslonMS0b6N2e9hpuJGd0SM
8lWlbjkWeyQs1AaJhOjzcLdubuKiHKkwCuCq3IwbcnzDusGaU8wWJwMsPvhC8pSR
nPzaQTrn4zLgZXjJgSUJe/0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284399564178730776764403335351341072810548
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-06 23:35:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 23:35:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rki.feb.unair.ac.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 899291367459123918552291921283909612892364514473904981727733493839103910541580651421626425722872379069968270327738359200714411658246359730135733917697913967855139360398806809517438540160298582531107313702565147517647360600312693700609159929513687610525035258101688452915166257726705240374807714697639616122491956016713315854867327667293899780658146773731054514773674270952898665136817025838791669687891771940272502637003680994557396932954555394804720922112352091186570064117485404067210151462550455992638686515497172871042274641658828826292270864855504863924475072473356992299985679084417571854809855722838293997634420598430113884474780422847419089133623834765638796112400403014491798310024337688600237490311738107285619650124355812030028106632806754763176289670244930100718843062883199168274441820183615438360108275713526905716662863641858531052850422914423775158327333899139804109065714430870292363222407489881833492031538347837544480286271206215571589346799675831883123840480147819745258583183550797495742089076148662948904001543171104520637093416215071627223312449504650637563004944017967321583049031607652474897584238960524178487573378433765593329571471994868867252270677022935282284915551649758968587036778736447692722401803261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bd115fe50e70526366e1f805c27d25028932b072
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rki.feb.unair.ac.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a6d10bd9100000403004630440220702e2aac0f37d5be585c2bdb19257311c98595e4131c34f58fbe128c5466fe5a0220386ed74f946534402da561bc94466bad7e27fa48e71dfe4eb660a8e566a571b3007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a6d10bf780000040300483046022100d9eb4ec52e5b092d87eb8889290bd45a723b334b002e6fc5b43e6cfa949dd199022100c25592b10f00c74057a668c469447231efc6f6bad6bd7e53f412d6899ab499fc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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