digital2019.tu.no

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:69:73:d5:4a:fa:8a:ee:b7:1e:ca:14:32:fa:d1:51:c6:09 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=digital2019.tu.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:69:73:d5:4a:fa:8a:ee:b7:1e:ca:14:32:fa:d1:51:c6:09
Serial Number (int): 297220475021473760666445986774198586033673
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 17:c3:98:3b:fa:90:2b:b4:22:80:4b:36:e7:48:d3:3d:8a:c0:d8:1b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7c:d6:79:a9:64:2f:39:53:2a:54:b0:83:7c:ea:09:ae:3f:24:82:fb
Fingerprint (sha256): 02:9b:61:9b:21:2d:1b:1d:e4:db:64:40:e7:84:2e:c8:2e:af:f1:68:e6:b8:ee:bc:0b:fd:e1:3c:80:82:36:f1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate digital2019.tu.no

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for digital2019.tu.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

digital2019.tu.no

Other certificates including the domain name tu.no

(limited to 100 certificates)
cdn.eblad.tu.no
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
digital2019.tu.no
dns-vetting1j.map.fastly.net
cdn.eblad.tu.no
twentythree.net
dns-vetting1j.map.fastly.net
dns-vetting1d.map.fastly.net
dns-vetting1j.map.fastly.net
twentythree.net
tu.no
web.tu.no
twentythree.net
dns-vetting1d.map.fastly.net
dns-vetting1j.map.fastly.net
jobb.tu.no
dns-vetting1d.map.fastly.net
twentythree.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
cdn.eblad.tu.no
dns-vetting1j.map.fastly.net
twentythree.net
dns-vetting1d.map.fastly.net
images.jobb.tu.no
twentythree.net
dns-vetting1j.map.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
dns-vetting1d.map.fastly.net
dns-vetting1j.map.fastly.net
tu.no
twentythree.net
abonnere.tu.no
sentry.tu.no
images.jobb.tu.no
secure0139.hubspot.com
twentythree.net
digital2019.tu.no
dns-vetting1d.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
dns-vetting1j.map.fastly.net
jobb.tu.no
dns-vetting1j.map.fastly.net
rekruttering.tu.no
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
web.tu.no
dns-vetting1d.map.fastly.net
twentythree.net
dns-vetting1.map.fastly.net
web.tu.no
dns-vetting1d.map.fastly.net
twentythree.net
images.jobb.tu.no
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
twentythree.net
digital2019.tu.no
dns-vetting1d.map.fastly.net
m.tu.no
twentythree.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
twentythree.net
twentythree.net
www.energilink.tu.no
images.single.no
dns-vetting1j.map.fastly.net
twentythree.net
dev.club.scorelit.com
www.aftenposten.no
twentythree.net
twentythree.net
dns-vetting1d.map.fastly.net
twentythree.net
twentythree.net
web.tu.no
twentythree.net
dns-vetting1d.map.fastly.net
digital2019.tu.no
secure0139.hubspot.com
twentythree.net
dns-vetting1d.map.fastly.net
energilink.tu.no
dns-vetting1j.map.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
*.tu.no
whitepaper.digi.no
dns-vetting1j.map.fastly.net
swarm.jobb.tu.no

Certificate

The complete raw certificate details for digital2019.tu.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgISA2lz1Ur6iu63HsoUMvrRUcYJMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMzAyMjI5NTBaFw0y
MDA2MjgyMjI5NTBaMBwxGjAYBgNVBAMTEWRpZ2l0YWwyMDE5LnR1Lm5vMIICIjAN
BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAx5KBkPPoztyu5Hs7zM4vgCqYPOWc
j2cZa+Rj+3fV1KPVDWBLa8t7ghQq/Begt3fogJviswKMvR/9fJmeU5EGflEpZBWE
yI63tnimygbfYKtx+zMozQINgevzfU2nrGxiu+Fwt60+0v08xelfsQAK7/DHDlHY
bPeObwQgOIOrWT7s7ud5znLvW9smz7Gidf9Ee7ngMS/LK3JOoq9nI+JS3QkQ5c1Q
Tt8NbqR6/SC5/HUm3h9Lnj8RmxX5+lA2XPepe8nq9M7StFetfjDH/PjguhroV9Nl
MTK9vsdqe3QzbbBJQS45rK5tU2SqOZIpVOa9RHjrTM187AxN71NmIZsdOdl3b6oQ
tRbtyi4Enrs8FG2STKmuP67gO9gQPQQWrJRynQUzaebKFjstq4ia0wEuj7Z41jy3
S65c3VVfzkGFR65xtyoqJAmWR95sUKxNPsZT3rW0dOah0YdD02YeLb9z8YTSwF92
scOLu6Vdr98WUCrDC9P/re3vlgj7tO0saESR/HXINDlDphJqlFwmrYgSrgasPuA3
4eeYFe9vm9jpSB/+BzhyIp5MC1mDiKMmtcvkctnGwB6lrDnEmMlAY8nVPgknFwFd
TA7nX5giMcpp2Z0s7N0DoVvxvDYwV78YkzSa3q7J1DwCGjoIY8Lv8cs/+a27rk2a
4qbymUNrSdYV/hUCAwEAAaOCAmgwggJkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
F8OYO/qQK7QigEs250jTPYrA2BswHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl
7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p
bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p
bnQteDMubGV0c2VuY3J5cHQub3JnLzAcBgNVHREEFTATghFkaWdpdGFsMjAxOS50
dS5ubzBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG
AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQYGCisGAQQB1nkC
BAIEgfcEgfQA8gB3ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAAB
cS3HpTEAAAQDAEgwRgIhAPK0A9VimQv+xx3/K/TL6D6k39F8lBCS++g7dN7ZpuKx
AiEA8+upMgbymq987e2TI0CQXBzoLr3OhXzWvYFAaAL16CoAdwBvU3asMfAxGdiZ
AKRRFf93FRwR2QLBACkGjbIImjfZEwAAAXEtx6WjAAAEAwBIMEYCIQCBy4sGOMP+
QB5sveogxBAvppif85BvpAnempXDSgWIgQIhAIu3/gSBdmePbPsgFNYPvXCogSCU
C+8OdOMzWfUFZ+IaMA0GCSqGSIb3DQEBCwUAA4IBAQAbWOnkPqh6YDLQ5HRPPpBo
4suuHYXbk8EV4rosF5bslyBQJRtFXq/AkeLRU8EG6DjOWJsNTKm2HFZOaJ4s0zxt
IrC82g3YbxFmS63sfCcX/M/s2EvckcaiuCZ2VVQ/mY0ohJknuoZ9UtqPflOChuTC
8WWrEOTV1+R68CstVs5cKFItAPHUy0BnPGdtQiEVOHTmziuFt5preJWM/zjQxjkq
W4lKc5RrNWG92P0ywIFVjS1M0p/FZwL3g0jUJGkXjhqzynDOA2zoSguRmLj9H5rI
Yz7qci1RXAVm2b9f5hmCZS5UyuqDu22PwaLcKGpNWddP2enIG1jFPlNpWIUPTh9H
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297220475021473760666445986774198586033673
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-30 22:29:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-28 22:29:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'digital2019.tu.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 814183907096343832999897278259803188207223632237398606413362651779636876602173959650562784503275971652013933112259817929301262502857813301651647898751781505088750610920036648340292272682171099011065620828490754092252367982315314845137655231502439639421794871376097325369179851959839584542173580915087539621916851074480989412184316038374297626460327306917364282136188751394644116054354599678568053110561990656467624563244707936897133001537157804467728780309394926545814839784149582890493437002152803157313528246039965247037365971202891663604767598450461634617049125250118449977862652873001960576506498064963978366383228475591745215183160661373555153294498415370713427194609413105475142590594683162988302422505130456015552419384995079149132661473558722558149733497977374770363263082394268059451803161380805406756093467359191872861566568220045579665616904136567361986673714767421272164288527185310360488145976815496889314784640404749814243526326221547060657302048683422763493389737709944494530514374730357579059989943876187958462997712205389755463762916413520033467254204675269990318417944760650521971897540729076418097121660612930794760620848989177698961759218936902541761111963293213424549678142690597083864277652622796651988172275221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							17c3983bfa902bb422804b36e748d33d8ac0d81b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital2019.tu.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001712dc7a5310000040300483046022100f2b403d562990bfec71dff2bf4cbe83ea4dfd17c941092fbe83b74ded9a6e2b1022100f3eba93206f29aaf7ceded932340905c1ce82ebdce857cd6bd81406802f5e82a0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001712dc7a5a3000004030048304602210081cb8b0638c3fe401e6cbdea20c4102fa6989ff3906fa409de9a95c34a0588810221008bb7fe048176678f6cfb2014d60fbd70a88120940bef0e74e33359f50567e21a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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