ssl-wg1.revizesites.com

Issued by R3

About this certificate

This digital certificate with serial number 04:25:8b:23:7a:d8:e2:ee:ef:ae:43:0d:20:b7:84:c1:43:a8 was issued on by Let's Encrypt.

With 37 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ssl-wg1.revizesites.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:25:8b:23:7a:d8:e2:ee:ef:ae:43:0d:20:b7:84:c1:43:a8
Serial Number (int): 361224538216557348976950821571520578536360
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 23:e6:36:a0:6e:4f:c1:28:16:34:c7:cf:f2:70:70:5a:88:31:04:74
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 52:0e:5e:64:c2:ef:6b:e2:a6:42:45:d7:89:d7:78:c8:3c:85:d6:5b
Fingerprint (sha256): 07:c3:c8:d6:55:d4:7a:7a:0b:3a:c5:4a:1e:70:80:de:bc:86:3b:b6:db:dc:f6:f4:7d:1f:6e:e0:88:ed:5e:e2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ssl-wg1.revizesites.com

37

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl-wg1.revizesites.com

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bataviaoh.gov
bataviavillage.org
buffalotex.com
ci.victoria.mn.us
cityofnewmanil.com
cityofutica.org
flatrockmi.org
haytiheightshousingauthority.com
hettingercountynd.com
murchisontx.com
newfieldme.org
richlandtownship.com
sainthedwigcity.com
southcountywater.com
southcountywater.org
ssl-wg1.revizesites.com
townofwagram.net
victoriamn.gov
villageofwaterman.com
www.bataviaoh.gov
www.bataviavillage.org
www.buffalotex.com
www.ci.victoria.mn.us
www.cityofnewmanil.com
www.cityofutica.org
www.flatrockmi.org
www.haytiheightshousingauthority.com
www.hettingercountynd.com
www.murchisontx.com
www.newfieldme.org
www.richlandtownship.com
www.sainthedwigcity.com
www.southcountywater.com
www.southcountywater.org
www.townofwagram.net
www.victoriamn.gov
www.villageofwaterman.com

Other certificates including the domain name revizesites.com

(limited to 100 certificates)
ssl1.revizesites.com
ssl8.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl3.revizesites.com
ssl4.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl1.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl2.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl-wg1.revizesites.com
ssl2.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl9.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl1.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl9.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl7.revizesites.com
ssl9.revizesites.com
ssl8.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl2.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl1.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl9.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl2.revizesites.com
ssl7.revizesites.com
ssl1.revizesites.com
ssl7.revizesites.com
ssl-wg1.revizesites.com
ssl4.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl7.revizesites.com
ssl4.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl3.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com

Certificate

The complete raw certificate details for ssl-wg1.revizesites.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 361224538216557348976950821571520578536360
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-01 13:54:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-30 13:54:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl-wg1.revizesites.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4098671986941243928954685654757461795167342588168222438062819743476332210371649298585922309178132793300335298204648256549775857319109155080471270717038331429931263820279215037762514893421288366523023762059142278403987361267024511373427418008720397903808137657445665384716824158347030232118609484653479386803708132434783713490505119812652858379229914752952227910327309091165984215137352836292109359646452654408927338563850105081517832171173953357445841997206606372045773425639724333246027392343851386550581906159737562425901737973788589666552934758031370544414787441348738153125728263030089124397889511953013812773546969364022972778243724027196176528854351315834042378846290684224957750743315581052507745786074741873569342881738501878652650155042284899185334366193390020779794784019080048965421766619873360337878722228608578831652088594737873494169731603895732582269366574507292749106152476710184345477592347479390484497763971
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							23e636a06e4fc1281634c7cff270705a88310474
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (815 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bataviaoh.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bataviavillage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buffalotex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci.victoria.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofnewmanil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofutica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flatrockmi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haytiheightshousingauthority.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hettingercountynd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'murchisontx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newfieldme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richlandtownship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sainthedwigcity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southcountywater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southcountywater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-wg1.revizesites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'townofwagram.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'victoriamn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'villageofwaterman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bataviaoh.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bataviavillage.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buffalotex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.victoria.mn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofnewmanil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofutica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flatrockmi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haytiheightshousingauthority.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hettingercountynd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.murchisontx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newfieldme.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richlandtownship.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sainthedwigcity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southcountywater.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southcountywater.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townofwagram.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.victoriamn.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villageofwaterman.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001869dab5cfc000004030047304502205346908d41e8cd67b72f89846061fda2ebb3905345085b196378005464a083c1022100c39ec0765897194edacffd4f696fb8569466e2dc8510c97f96a2f457a14b3995007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001869dab5d290000040300463044022030f0433f5d45701326962e29e9196ec00ecfb88f37deae18f9df352343d22f5802207954009b17cf33f5fb6c3536ae949970e99f3586a1eeca650efe55e485f573fd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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