sitetest.thecodingmachine.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:65:a1:a4:1f:cd:42:69:3e:a3:04:29:25:98:ef:20:63:9e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sitetest.thecodingmachine.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:65:a1:a4:1f:cd:42:69:3e:a3:04:29:25:98:ef:20:63:9e
Serial Number (int): 295920234743318720189220207490071816856478
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cf:e8:a2:85:83:8e:4e:83:59:7a:57:dc:44:05:40:5e:6d:12:82:b2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c0:cc:a8:a6:94:25:c3:e8:26:c1:72:de:89:0b:1f:29:f5:f8:ca:e4
Fingerprint (sha256): 08:b2:e3:f8:b3:9f:17:ca:2e:a2:f3:e5:5f:80:17:69:2f:64:f5:d6:40:34:5c:3e:b2:97:d7:6c:af:53:bb:7c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sitetest.thecodingmachine.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sitetest.thecodingmachine.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sitetest.thecodingmachine.com

Other certificates including the domain name thecodingmachine.com

(limited to 100 certificates)
si.thecodingmachine.com
mantis.thecodingmachine.com
todo.thecodingmachine.com
si.thecodingmachine.com
loginmachine.thecodingmachine.com
bestpractices.thecodingmachine.com
si.thecodingmachine.com
loginmachine.thecodingmachine.com
sitetest.thecodingmachine.com
codersv2.thecodingmachine.com
git.thecodingmachine.com
thecodingmachine.com
formationhttps.visial.test.thecodingmachine.com
todo.thecodingmachine.com
loginmachine-temp.thecodingmachine.com
sitetest.thecodingmachine.com
bigbro.thecodingmachine.com
projects.accountsprojects.uk
loginmachine.thecodingmachine.com
sitetest.thecodingmachine.com
sitetest.thecodingmachine.com
docknmach.thecodingmachine.com
coders.thecodingmachine.com
si.thecodingmachine.com
todo.thecodingmachine.com
contactmachine.thecodingmachine.com
projects.publisherpro.app
api.robine.thecodingmachine.com
sitetest.thecodingmachine.com
git.thecodingmachine.com
contactmachine.thecodingmachine.com
git.thecodingmachine.com
bigbro.thecodingmachine.com
si.thecodingmachine.com
oauth.thecodingmachine.com
coders.thecodingmachine.com
codersv2.thecodingmachine.com
project.thecodingmachine.com
project.thecodingmachine.com
clientmachine.thecodingmachine.com
git.thecodingmachine.com
git.thecodingmachine.com
thecodingmachine.com
git.thecodingmachine.com
api.staging.ca.test.thecodingmachine.com
git.thecodingmachine.com
loginmachine.thecodingmachine.com
git.thecodingmachine.com
projects.publisherpro.app
mantis.thecodingmachine.com
thecodingmachine.com
mantis.thecodingmachine.com
loginmachine.thecodingmachine.com
loginmachine-temp.thecodingmachine.com
clientmachine.thecodingmachine.com
codersv2.thecodingmachine.com
contactmachine.thecodingmachine.com
loginmachine.thecodingmachine.com
uneo.thecodingmachine.com
loginmachine.thecodingmachine.com
loginmachine.thecodingmachine.com
loginmachine.thecodingmachine.com
mail.thecodingmachine.com
sitetest.thecodingmachine.com
oauth.thecodingmachine.com
contactmachine.thecodingmachine.com
si.thecodingmachine.com
ea1-i93.envie-autonomie.test.thecodingmachine.com
si.thecodingmachine.com
mantis.thecodingmachine.com
mail.thecodingmachine.com
nowco.thecodingmachine.com
si.thecodingmachine.com
projects.publisherpro.app
bestpractices.thecodingmachine.com
thecodingmachine.com
si.thecodingmachine.com
thecodingmachine.com
bestpractices.thecodingmachine.com
loginmachine-temp.thecodingmachine.com
thecodingmachine.com
bestpractices.thecodingmachine.com
api.staging.saveup.test.thecodingmachine.com
loginmachine-kube.thecodingmachine.com
api.staging.saveup.test.thecodingmachine.com
tournoi.thecodingmachine.com
ea1-t158.envie-autonomie.test.thecodingmachine.com
bestpractices.thecodingmachine.com
uneo.thecodingmachine.com
oauth.thecodingmachine.com
bestpractices.thecodingmachine.com
thecodingmachine.com
thecodingmachine.com
git.thecodingmachine.com
si.thecodingmachine.com
si.thecodingmachine.com
loginmachine.thecodingmachine.com
project.thecodingmachine.com
todo.thecodingmachine.com
api.staging.saveup.test.thecodingmachine.com

Certificate

The complete raw certificate details for sitetest.thecodingmachine.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgISA2WhpB/NQmk+owQpJZjvIGOeMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMjIxMTA0MjFaFw0y
MDAyMjAxMTA0MjFaMCgxJjAkBgNVBAMTHXNpdGV0ZXN0LnRoZWNvZGluZ21hY2hp
bmUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXCXlLim3Jbb
ORc6EUQQi9XW0Zj7qJ8p+J1RVbrnsg8sD7s+wrsXegBBEiSnf8cB/uvLfP7sOiHh
o613vIttt1O++aAmCUGqeSKPr6FJsBqLHoKR/7AsDV5j6hsHQ0IbGzdASUfFB/Wy
+DT0ERM3pJzUzAKtVDV2/Kaqbk88rvxGaFpMz1hJFN2t4xgrQOxI/LvMPb4pDK3M
JbvXHjDLjSCPjizGR/CUVgjSBiWBwNr4pPFihot9TckG+ik/7QX2Ut9/PNuCGC5d
8WMrj4p2zuobA+j5gx3pevei9+lfxxWoZpjdK77IBPcWHIpkGNd5JrhXcsMjGl8l
llrfoJcRcQIDAQABo4ICcTCCAm0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTP6KKF
g45Og1l6V9xEBUBebRKCsjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMCgGA1UdEQQhMB+CHXNpdGV0ZXN0LnRoZWNvZGlu
Z21hY2hpbmUuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB
MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYK
KwYBBAHWeQIEAgSB9ASB8QDvAHUA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKaw
qKqOsnMAAAFukv+zCAAABAMARjBEAiBBv4eK4yltHAiDbArJzZrTyNNYo+vLKlhj
LPWseQvVvQIgGMGXjKAQMyq5Ls0ccF9PsxhDQaWxwtYJ3N2KTt/iVX4AdgCyHgXM
i6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAW6S/7MjAAAEAwBHMEUCIQDV
qQBTfXpmI/BAxd7sW3s5HmCfbRrV80qrwaJJjfxIhwIgSuJ0DtbFEGdUp6dQynLF
NodpeuwJaocOoyOE+Y6i4FkwDQYJKoZIhvcNAQELBQADggEBADTY9S3wF3CtX87t
NWCm097Xq/20G/JIg1ufOrhc2TN5qd3Ve//bVFd2qRx/tF6Lh9smGOUGtj0OAJ/F
yG0b8rQ9VSqrwRT9GQgTwo5YpkAPlp6fyEsOel7R78nEdD8qwunH8ughdc9T32rk
k8ss53YdMcnVD8SAmLp6IFjOrtEne9urvnu3PFMp1a3B996RJoOp8Gh9zWIwyNUH
QQudPBM/ZzyeeCpMUAG/iZXoNKXheE2DYKmahtrNuQu/na7YS9qQ/WwalmKPB5zt
o0q5ESIYR/AHZ4UzUeGsHM5Rrdb29Dgqs6Rv65efBaXzs5x0RPJfOQizh5vAffug
fnco9as=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXCXlLim3JbbORc6EUQQ
i9XW0Zj7qJ8p+J1RVbrnsg8sD7s+wrsXegBBEiSnf8cB/uvLfP7sOiHho613vItt
t1O++aAmCUGqeSKPr6FJsBqLHoKR/7AsDV5j6hsHQ0IbGzdASUfFB/Wy+DT0ERM3
pJzUzAKtVDV2/Kaqbk88rvxGaFpMz1hJFN2t4xgrQOxI/LvMPb4pDK3MJbvXHjDL
jSCPjizGR/CUVgjSBiWBwNr4pPFihot9TckG+ik/7QX2Ut9/PNuCGC5d8WMrj4p2
zuobA+j5gx3pevei9+lfxxWoZpjdK77IBPcWHIpkGNd5JrhXcsMjGl8lllrfoJcR
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295920234743318720189220207490071816856478
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-22 11:04:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-20 11:04:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sitetest.thecodingmachine.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23914560878838392797452932727545739839058336406718534617603616259169079959418107445771496680300448122094853327521102014628067086761129830011226576017302559976319705767787129680302812580639520927080958532940968609963313085558952322440185826916756905601219367744164627836827307904015950046354763879269844126871999265719485852206155857423010529811961354471598784926127850134112331767914829917213560302834441410525657290755098167955787267459073816611756946287949784265520576760759911775081905923834175760605356073418651393864471310210801494946272219737519381665809331938080382620288535694430066432222030685471299864039793
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cfe8a285838e4e83597a57dc4405405e6d1282b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitetest.thecodingmachine.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e92ffb3080000040300463044022041bf878ae3296d1c08836c0ac9cd9ad3c8d358a3ebcb2a58632cf5ac790bd5bd022018c1978ca010332ab92ecd1c705f4fb3184341a5b1c2d609dcdd8a4edfe2557e007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e92ffb3230000040300473045022100d5a900537d7a6623f040c5deec5b7b391e609f6d1ad5f34aabc1a2498dfc488702204ae2740ed6c5106754a7a750ca72c53687697aec096a870ea32384f98ea2e059
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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