admissions.bam.uaf.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a1:d5:a3:6a:76:57:34:ca:34:73:30:e6:b8:42:1f:c3:15 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admissions.bam.uaf.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a1:d5:a3:6a:76:57:34:ca:34:73:30:e6:b8:42:1f:c3:15
Serial Number (int): 316406292936353290993949866054290539266837
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c1:31:28:7b:39:9f:19:25:c2:60:22:3e:74:9f:0a:c6:10:4a:bd:61
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 15:0d:c7:12:4e:86:9e:27:40:86:a0:be:a0:ee:10:a1:9b:79:b7:a2
Fingerprint (sha256): 07:15:7c:1b:dd:5f:45:c9:52:0d:d1:24:28:4d:99:7d:3c:0f:ea:96:26:8a:3f:c2:84:33:5b:07:ac:64:9e:a9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate admissions.bam.uaf.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admissions.bam.uaf.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admissions.bam.uaf.edu

Other certificates including the domain name uaf.edu

(limited to 100 certificates)
carpepm.almonds.com
it.uahs.arizona.edu
calendar.sdzsafaripark.org
banking-business-review.com
cdn-test.battlefields.org
libguides.library.uaf.edu
citeak.multidevcom.uaf.edu
banking-business-review.com
athena.snap.uaf.edu
chns120.courseresource.yale.edu
208.lsnc.net
ineshare.uaf.edu
community.uaf.edu
www.ctc.uaf.edu
banking-business-review.com
tls.automattic.com
www.snap.uaf.edu
hub.meed.com
208.lsnc.net
yakamafish-star.net
j2.shared.global.fastly.net
dev.wellness.yale.edu
www.snap.uaf.edu
bejih.com
community.uaf.edu
reindeer.salrm.uaf.edu
www.csc.uaf.edu
live.ucdavis.edu
info-dev.calperformances.org
agd.nebrwesleyan.edu
streetfilms.org
chns168.courseresource.yale.edu
good.gsm.cornell.edu
admissions.hsem.uaf.edu
agd.nebrwesleyan.edu
j2.shared.global.fastly.net
*.email.uaf.edu
dev.embody.yale.edu
tiles.snap.uaf.edu
club.kjzz.org
a.ns.christiancentury.org
bejih.com
dev.wellness.yale.edu
www.ctc.uaf.edu
admissions.bam.uaf.edu
snow.ine.uaf.edu
host2.openminds.com
library.uaf.edu
local3599.com
sara.phys.uaf.edu
nrostatic.com
208.lsnc.net
stage.sfos.uaf.edu
qs.uaf.edu
redirect.web.alaska.edu
cnsm.uaf.edu
208.lsnc.net
www.uaf.edu
a.ns.christiancentury.org
web.cfos.uaf.edu
j2.shared.global.fastly.net
photos.uaf.edu
live.bme.cornell.edu
admissions.hsem.uaf.edu
classes-prep.uaf.edu
agd.nebrwesleyan.edu
cms-prod-edit.uaf.edu
ssl.smugmug.com
j2.shared.global.fastly.net
alaskasprucebeetle.open.uaf.edu
banking-business-review.com
j2.shared.global.fastly.net
inside.gc.cuny.edu
psy-pdcmini01.cla.uaf.edu
bejih.com
archivescatalog.library.uaf.edu
connect.iadb.org
abong.ufcespanol.com
aasdsloth.gsm.cornell.edu
library.uaf.edu
archives.library.uaf.edu
virtuallabs.uaf.edu
akdec.alaska.edu
voicesuncaged.com
community.uaf.edu
www.sfos.uaf.edu
et.uaf.edu
acadmintest.cuofco.org
tls.automattic.com
208.lsnc.net
kenphilipcollection.alaska.edu
banking-business-review.com
bejih.com
us.prod.campusgroups.com
160.167.tmcapital.com
grotto.geobotany.uaf.edu
www.iarc.uaf.edu
161511-web1.vilcek.org
ltdev.uaf.edu
vc.csc.uaf.edu

Certificate

The complete raw certificate details for admissions.bam.uaf.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgISA6HVo2p2VzTKNHMw5rhCH8MVMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMjYwNTE1MDRaFw0x
OTA2MjQwNTE1MDRaMCExHzAdBgNVBAMTFmFkbWlzc2lvbnMuYmFtLnVhZi5lZHUw
ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDQguKq5+z5KsmG0cDc1JEP
tXvD44049/wF9DQyxaCLT71JJZbAUe+p9x3Oz9IctCQIr2/8PqUjjWzAB2p+VxOU
JRvJyUSWgg5f0qfF5vcl0MMLYxa14aIzMT8hUKUCBeIeSjL1gxJgU182Pk6Fie0c
FH7h4DLrL1qzt1aytljv3kmo2a5+PJGXYSg11dNW0Pr9lpbS35h1do9i2++wuEMO
6hUgGE1xEhhaGppRQZO6JcB5FU4Xr6mCmzl68YPOFlctDM+URGHEkFlHUkyDc108
QhiBEGGPjE9eI/Yy4DqVZRfXjhYZtU0+cb2nWyRE+8ZgvtP4DJmZgUhbGyU5eyic
/i13sZa5joHqEjUwVES3WKUHru5FUtbxhVHV/aMCZh8fdNi34TpDSu1uA8sAsBpM
K7Ibirixw5Lew9vdTuqOqUGzNSLYdPo1K7kmQfx7jECrElbtQkCx/6A8gtJUfZ4j
pDuIgmRzQUJGCD22ZTS/Tc8nKNV6gro5FqvYmUwzBixNzhQkOwvt5NL4QARoBkOG
LRbx9svyJs1+Xer95+yXaUmm3dqK8rAZcstlgMtdyRvet/aUSpgJC4sWGa2Xf4cf
T8qhadBr2JAzuN4ojYkPYocrPXHydy0Lh099k5WVtw5Om2kAQv1k/gWNVHiTQMYG
wK1B31OHq9cBRZowCAI/rQIDAQABo4ICbDCCAmgwDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud
DgQWBBTBMSh7OZ8ZJcJgIj50nwrGEEq9YTAfBgNVHSMEGDAWgBSoSmpjBH3duubR
ObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9v
Y3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9j
ZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCEGA1UdEQQaMBiCFmFkbWlzc2lv
bnMuYmFtLnVhZi5lZHUwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB
AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEF
BgorBgEEAdZ5AgQCBIH2BIHzAPEAdgB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3
NXnmEHvMVgAAAWm4o1FPAAAEAwBHMEUCIQCnOWatJgWVV47h4VeT57z/wO3iUnEZ
UoodoOxSF/xpRQIgCMkbEyuBzDhhNiPE491XQczphDnc2kwyO+nNGCWCKOcAdwBj
8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWm4o0/cAAAEAwBIMEYC
IQCFJMGcSqKwGirHLXV2JZJbQAzB+xDjjhORjk0IigU6UgIhALqWs8Cioz34aet0
ULsmI6b+0hESqTeqWIRk47dmOUNEMA0GCSqGSIb3DQEBCwUAA4IBAQB/RwsNzRxM
nGOylNKQbX+WyLdM5B4iCbwJrIeC4otwOVvi0I/VVzWAZ8GMy32xnGisJomjf/Ce
zB1LDrsh0f5sOwxskukF/1HyfFCAEVVCq3sLrOO2y3NOw8/aZTe08Cr9vxvQH80X
YiKLnCEOGzLmJxisA+7sSeK6S52MuI1TL3wvTVvuBFFB3Af0Yp1UjBZAiq2ea9Nd
t6UeswuBcyVQi4M1LfRyvacAz75GcnUF7bbntUyAGbLiJR5UzEXsogk62jK6vlyJ
e5NXtipvcA4cVV7h85YR0mynrObUv0YhR33OsXhpQIXzu72So2SNY52jFrEpH1E0
y4LSlsDi9FwG
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316406292936353290993949866054290539266837
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-26 05:15:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-24 05:15:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admissions.bam.uaf.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 850651770556743449296782535323541005858999717739475122062143789450830928804316537987125113626543953587379585306457691498922319337883356694406636771593170844073728314211477598858958120333630815008402388747842382320293023633057311366996804236884334410971257132403393478912929292583812863564241998313934930191737770944176081182621572544458830174921588687139919303291596669103511151083905937086500132197879194633157078237539338757881583693687737062847944839687069384024262667811897584865277593642558222314314745654101094384770480231070340390078950595433786015195140304578163798935548501720515533038459812056975507771648738753653364044945914939636238548810719171923926106592594124480378584648120264059860808416914626830446002794288793616749593515873806515059149486474771188578128544158569825394102578587853310320327889984292317586715620017435606083461233108021978690329375251764499835917830136383255519189661942027930384000236906513403110277117358356725126224499592688731234775053170137004437918602330518970595884503320036348295399285465554410624439805910931850465879400816279912257003719376426004783412635359879255155113878565260376060397840511750273835190183797480200802644461648093371856530574064456516100805769077731764469741343883181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c131287b399f1925c260223e749f0ac6104abd61
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admissions.bam.uaf.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169b8a3514f0000040300473045022100a73966ad260595578ee1e15793e7bcffc0ede2527119528a1da0ec5217fc6945022008c91b132b81cc38613623c4e3dd5741cce98439dcda4c323be9cd18258228e700770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169b8a34fdc00000403004830460221008524c19c4aa2b01a2ac72d757625925b400cc1fb10e38e13918e4d088a053a52022100ba96b3c0a2a33df869eb7450bb2623a6fed21112a937aa588464e3b766394344
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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