shared.napma.nato.int

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2f:cf:b3:78:54:91:61:4a:df:38:9f:70:5e:e2:aa:4d:ba was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=shared.napma.nato.int

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2f:cf:b3:78:54:91:61:4a:df:38:9f:70:5e:e2:aa:4d:ba
Serial Number (int): 277606211097419314077686976726866168794554
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f8:89:a7:14:b7:70:4f:6b:a9:7a:26:b0:2f:69:8f:db:a8:1f:38:2e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9f:f6:fc:ae:74:81:65:9b:61:ec:f8:c2:07:85:7b:be:24:a3:45:87
Fingerprint (sha256): 06:29:4c:db:28:1e:56:40:03:df:74:a5:02:52:dd:c3:10:6a:b6:44:23:d9:04:d9:cd:b8:8d:2d:53:08:00:79

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate shared.napma.nato.int

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shared.napma.nato.int

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

share.napma.nato.int
shared.napma.nato.int

Other certificates including the domain name nato.int

(limited to 100 certificates)
shared.napma.nato.int
meet.nahema.nato.int
ims.nato.int
npc.ncia.nato.int
www.natoschool.nato.int
*.nc3a.nato.int
www.nato.int
extranet.napma.nato.int
extranet.napma.nato.int
ap.ndc.nato.int
ncia.nato.int
apx.ndc.nato.int
elearning.natoschool.nato.int
*.ncia.nato.int
mail.cmre.nato.int
ndcmail.ndc.nato.int
www.asc.nato.int
awds.ndc.nato.int
mdm.napma.nato.int
mail.hrf.tr.nato.int
verity.hq.nato.int
extranet.napma.nato.int
ism.hq.nato.int
captiveportal.nahema.nato.int
msiac.nato.int
guest.napma.nato.int
gss.ncia.nato.int
servicedesk.thwaites.co.uk
ssc.nato.int
ncio.nato.int
dnbl.ncia.nato.int
acquia-sites.com
coi.nato.int
*.nc3a.nato.int
cmre.nato.int
itsupport.valeosnackfoods.com
www.ncia.nato.int
iocore.ivv.ncia.nato.int
www.nspa.nato.int
dnbl.ncia.nato.int
shared.napma.nato.int
awacs.nato.int
*.nacc.nato.int
*.ims.nato.int
redirect.napma.nato.int
nexus.dev.nato.int
acquia-sites.com
iocore-cwix.ivv.ncia.nato.int
*.nciss.nato.int
*.reach.nato.int
acquia-sites.com
emm.hq.nato.int
lldb.jallc.nato.int
apx.ndc.nato.int
ndccds.ndc.nato.int
apy.ndc.nato.int
www.ssc.nato.int
guest.napma.nato.int
sts.reach.nato.int
meet.nahema.nato.int
NSOVPN.natoschool.nato.int
ndccds.ndc.nato.int
skypeaccess.shape.nato.int
labs.academy.ncia.nato.int
shared.napma.nato.int
dev.nato.int
www.ssc.nato.int
amdc2-iss.ncia.nato.int
mail.cmre.nato.int
e-isaf.act.nato.int
*.nshq.nato.int
mdm.napma.nato.int
servicedesk.usspeaking.com
webmail.pia.nato.int
acquia-sites.com
diana.nato.int
jftc.nato.int
ticketing.alphamead.com
selfservice.act.nato.int
verity.hq.nato.int
acquia-sites.com
gp.csp.nato.int
mobile.pan.nato.int
meet.nahema.nato.int
redirect.napma.nato.int
acquia-sites.com
napma.nato.int
msiac.nato.int
extranet.napma.nato.int
extranet.napma.nato.int
guest.napma.nato.int
webmail.cmre.nato.int
haivision.hq.nato.int
*.ndss.nato.int
ssc.nato.int
www.msiac.nato.int
ithelpdesk.dccoilireland.com
servicedesk.thwaites.co.uk
eportal.nspa.nato.int
www.nspa.nato.int

Certificate

The complete raw certificate details for shared.napma.nato.int in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGdzCCBV+gAwIBAgISAy/Ps3hUkWFK3zifcF7iqk26MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMDcwNjAwNTRaFw0x
OTA0MDcwNjAwNTRaMCAxHjAcBgNVBAMTFXNoYXJlZC5uYXBtYS5uYXRvLmludDCC
AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALKDdZFSttSRgzNOab1JSrIg
YFfsOxcvXyObMx3xB3T0P5II6Iims9pFwO9oBhGXTxFLw/bqLpQfeQGLyY9END8T
HTFMh/X7GHFnrW3XYKL2X1QWxL3vNW6Vas/kZl1Es9q0tJowqvle0wSouYtkbbsF
tq4O0RZk9vv0zZ4kEVKy0u+KnBOEJ7shn+zxKelSttuHgmSZVUWZ3jeaY4yvqsHZ
9W8Mtz3KWlYISwvj/YjbyRpYRdbWuRCNK28MG2ZU6faSI5emQg+w4nlVud7whxgv
zKkV/ybEN+H9SXD3N4xCe40C0RLfGlZatU7PL8y9e4SDqFHVr1RJW4NZo7upjFvO
1b7+bLDPUgFJTnVprZp2BsoL7HiY08Rb342zw/oVzhVymq8YiRy04UNJYD9KV9NU
asy0rEsAZSi3Bv59TtSNjMYuPoOLRYgPkZXQ3kQkxJ6JejIVLmQH9sx6guXMXZet
NGp8nubs977vW5rJEcJrPJD/A9pH8zriq9B8Hpsw0vB/RH5I84Yn55xVIBVNonuT
2sO6h6wtvSoDNy/LLdoD6OKwyCDOlHhAGTlBhT/q5p/yZ19+K5S5pI2EV/kMEDHm
1z/4RM/uS1UlxrZGyL+SlyRC82/a/QEFb5nO19xKnC0o6wnJnYlKCG3eXxcE9+p3
ArRKwoSUAKjCx2tbs8arAgMBAAGjggJ/MIICezAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O
BBYEFPiJpxS3cE9rqXomsC9pj9uoHzguMB8GA1UdIwQYMBaAFKhKamMEfd265tE5
t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29j
c3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2Nl
cnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wNgYDVR0RBC8wLYIUc2hhcmUubmFw
bWEubmF0by5pbnSCFXNoYXJlZC5uYXBtYS5uYXRvLmludDBMBgNVHSAERTBDMAgG
BmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz
LmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AHR+2oMx
rTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAABaCcdPxMAAAQDAEcwRQIhAOa8
5t64Y7AnbKsqlcEsBI2SAVT5ClCIsXP/hnUMNbJZAiBrcRyGEy/N7j7xfe+34wOR
ZlI6FYFax4HCGUH8FouFHQB1ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVF
R/R4AAABaCcdPYkAAAQDAEYwRAIgTC77FV4Wfl6nXN9hqAk+5yyU4iqtvLIEJiSH
RRBX5jMCIEGy6NysMLGFbC/cNKo2h1dpfZAnh3IIHlDcihaRPjrSMA0GCSqGSIb3
DQEBCwUAA4IBAQBsb41To+1Fm1hwvr6Rg9KmxOzdAHCXcguPrXrIByaOtzHvk2Az
vX4F5OKd0JkeqXcByaJ9iuOHty1btP9nXXvIEJHWGSJfmx8gniXFSHwJSchGRJIp
wm+d7YGFHJfBeOkw6VaGzk/RFSu72MksVL9i+nQ1WYi80kcx4VNuaE2aRbwx3HIp
fJpKQGStKuORDzMMGg/CW4J22HU5+UCFqYuI/dKkhIdnNXS8Tmnmdf6VwCH5vfrp
wOHzlQ9j2npBbQZPDxt7AFpGLUrJ1sVcS4UCwGqp1O9OGZR71WuLiOsfYA41BKfq
B1wxEVQGkMGWestUjzV9wNkGkSj0S1ir/Z6W
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277606211097419314077686976726866168794554
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-07 06:00:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-07 06:00:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shared.napma.nato.int'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 728271593108223050764014887916631170733462456707119035234037963153682484437576893719914898507226824825572960072633116456329450788567517194876653513078269168833721295912985856264570757291002549412876867315704207198877477595010125025577001841487923474239494375698698614651088531663595992827046104655352341556451199045004929480333447061896243431076835759364647434776468276053481108138468935082681161166731045122136597973812159070554411159917851012529334743960216331324976516689405916480768352957528887802882219325343340060772485852212200029479411616395552089886174876598616730832737576185130436401118899928971044151802866254518035357608685633495938814540416911899652135018874586773012299419873674787614323325456568333797086399675968101334728984475366017046014012925708705423541265802884951617575272420590756733273410071364992104585535788600326509121410664490630443178349248814001348379738024269143331725618455756722212709154106685566867969244091160013403003857097284993632663448443190747407287060456302741605224708662575223161483652257791226890654909293033377952858921234291275963794535529518149815919252773670549578380661521431228238286692457031536908165782311606878125115519422319318118160855761846771128408722393469916916449478428331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f889a714b7704f6ba97a26b02f698fdba81f382e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.napma.nato.int'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shared.napma.nato.int'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168271d3f130000040300473045022100e6bce6deb863b0276cab2a95c12c048d920154f90a5088b173ff86750c35b25902206b711c86132fcdee3ef17defb7e3039166523a15815ac781c21941fc168b851d007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168271d3d89000004030046304402204c2efb155e167e5ea75cdf61a8093ee72c94e22aadbcb204262487451057e633022041b2e8dcac30b1856c2fdc34aa368757697d90278772081e50dc8a16913e3ad2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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