app.datorama.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b0:4c:03:41:0c:73:2c:76:da:a1:1b:f0:74:54:a4:3f:50 was issued on by Let's Encrypt.

With 26 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=app.datorama.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b0:4c:03:41:0c:73:2c:76:da:a1:1b:f0:74:54:a4:3f:50
Serial Number (int): 321327592597279145437916716001474105327440
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ea:12:7a:74:bf:b1:f8:b2:a7:3c:09:a4:79:fd:f3:7b:0e:a6:4f:e9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 22:80:4c:a0:23:7b:eb:bf:44:a0:a8:cd:08:96:b3:95:c1:79:e0:56
Fingerprint (sha256): 04:4e:eb:bb:43:85:cf:44:9d:db:fb:b4:d3:37:3d:e8:8b:69:96:24:57:14:6f:43:c9:8d:a0:b1:ce:21:3d:94

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate app.datorama.com

26

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app.datorama.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api-eu.datorama.com
api-eu2.datorama.com
api-us2.datorama.com
api.datorama.com
app-eu-static.datorama.com
app-eu.datorama.com
app-eu2-static.datorama.com
app-eu2.datorama.com
app-static.datorama.com
app-us2-static.datorama.com
app-us2.datorama.com
app.datorama.com
app1-eu.datorama.com
app1-eu2.datorama.com
app1-us2.datorama.com
app1.datorama.com
app2-eu.datorama.com
app2-eu2.datorama.com
app2-us2.datorama.com
app2.datorama.com
platform-eu.datorama.com
platform-eu2.datorama.com
platform-us2.datorama.com
platform.datorama.com
stg-platform.datorama.com
stg.datorama.com

Other certificates including the domain name datorama.com

(limited to 100 certificates)
mindadmedia.datorama.com
incapsula.com
ivgeny-test-eu2.azure.datorama.com
incapsula.com
white-label-eu.datorama.com
app.datorama.com
*.datorama.com
app-eu2.datorama.com
white-label.datorama.com
white-label-us2.datorama.com
incapsula.com
white-label.datorama.com
arkiv.status.geoikt.no
app.datorama.com
support.wunderbar.com
datorama.com
*.datorama.com
white-label.datorama.com
app-eu2.datorama.com
app-eu2.datorama.com
mindadmedia.datorama.com
white-label-us2.datorama.com
app.datorama.com
white-label-us2.datorama.com
app-eu2.datorama.com
app.datorama.com
datapitt.datorama.com
white-label-us-origin.datorama.com
*.datorama.com
app-eu.datorama.com
custom-app.datorama.com
api-eu2.datorama.com
arkiv.status.geoikt.no
app-eu2.datorama.com
*.databricks.datorama.com
incapsula.com
incapsula.com
white-label-us2.datorama.com
incapsula.com
*.datorama.com
incapsula.com
dev.datorama.com
incapsula.com
info.datorama.com
ps-jenkins.datorama.com
stg.datorama.com
white-label.datorama.com
white-label.datorama.com
idp.datorama.com
app-eu2.datorama.com
incapsula.com
alb-stg-sftp.datorama.com
dev.datorama.com
custom-app.datorama.com
mindadmedia.datorama.com
support.datorama.com
incapsula.com
incapsula.com
mindadmedia.datorama.com
app-eu.datorama.com
mindadmedia.datorama.com
white-label-eu.datorama.com
dev.datorama.com
blog-jp.datorama.com
app-us2.datorama.com
*.datorama.com
app-eu2.datorama.com
blog-jp.datorama.com
*.datorama.com
white-label-eu.datorama.com
white-label-eu.datorama.com
*.datorama.com
white-label.datorama.com
white-label-eu.datorama.com
white-label-eu.datorama.com
white-label-eu-origin.datorama.com
app-us2.datorama.com
incapsula.com
trust.datorama.com
pulse.datorama.com
arkiv.status.geoikt.no
fdus-3.freshdesk.com
stg.datorama.com
*.datorama.com
incapsula.com
app.datorama.com
white-label.datorama.com
stg.datorama.com
dev.datorama.com
imperva.com
azure-eu-ftp.datorama.com
white-label-us2.datorama.com
blog-jp.datorama.com
www.datorama.com
blog-jp.datorama.com
white-label-eu-origin.datorama.com
integration-service-prod-us2.datorama.com
pulse.datorama.com
stg.datorama.com
datapitt.datorama.com

Certificate

The complete raw certificate details for app.datorama.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXySP+ZtUgMgzPTIkE+U
5ASeFRXycEa0PHY3GS2EGfh7MtJHsGm7fhksgm4kwFtGPQYUn0dUwyU2Voa6fCd5
Yu+bjMjbNmoc308JgLvRgBFT014JuVMkr4PFK1zLAzC7J2AK9jYsfHX1pLH11tul
xS0umtvXxx4OGQj66RFq1OzaKpmk8K8bm5of/CL9PFYpQuGKwX97q0ugT4nMgCCP
ihTRDP/peVQSxudSyFNxWG7doLQe1+aG0rNXNv1RLd2M+wELWPT0SLsiX3Nq1ZLr
7kGI5Ydf5TjKS0SnEKelHmjhgTb1Sx51HDiKfUc74HBDm7kIAxTLdtxNTKtyP7PY
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321327592597279145437916716001474105327440
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-24 13:33:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-22 13:33:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.datorama.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25940280909394618953362929264176430314801178727393892035468397632616999062524491375202314164427152589075137332359563874333386614828633808843862201520545340699863903962006972690831211318406914674999740865636559578261765120328697920467254678689371947767704951285881430467765683266311999763901436594214987656774965847393653940867404746774062276125038909716291260493816612152193389260165260809302461405572100406969314290330176817517423885143505896562786536870330149519951694836714495409680385708970534043211135071309828135103292005798144889285647038374852376920098636620363722526209597218669888636842419826017435022252257
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ea127a74bfb1f8b2a73c09a479fdf37b0ea64fe9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (603 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-eu.datorama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-eu2.datorama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-us2.datorama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.datorama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-eu-static.datorama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-eu.datorama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-eu2-static.datorama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-eu2.datorama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-static.datorama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-us2-static.datorama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-us2.datorama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.datorama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app1-eu.datorama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app1-eu2.datorama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app1-us2.datorama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app1.datorama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app2-eu.datorama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app2-eu2.datorama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app2-us2.datorama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app2.datorama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platform-eu.datorama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platform-eu2.datorama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platform-us2.datorama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platform.datorama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-platform.datorama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.datorama.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf640000016432369155000004030047304502200aa1c9f74ffa5bccd924f42a11e26c9fd58d6d2580ac55f31c2f094e063255a8022100d39d955f7524e0ac40b2e79e3a6bdc522e8c077a13a3a281c18ce23585bfabb3007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000164323691680000040300463044022050520a48c9e261e69a388efc6c14c383b1a9f771c22986c79fb6698e7806f60e02200e5b5ede9f45ef4905690d2c8aa0f1c9520c8001a6f2f1d91ef64fc3fb35283a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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