printshop.wm.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4e:c7:06:30:ac:1c:f8:9d:cb:c0:0f:07:97:a5:3e:e1:b0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=printshop.wm.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4e:c7:06:30:ac:1c:f8:9d:cb:c0:0f:07:97:a5:3e:e1:b0
Serial Number (int): 288143430927248160624470521326792077140400
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6f:19:b5:89:99:3d:15:9b:35:7c:18:33:fd:bc:ee:09:14:4e:33:61
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): eb:86:33:93:ce:3f:56:82:ff:f5:42:73:4d:45:98:58:47:c4:35:77
Fingerprint (sha256): 0a:01:40:21:09:df:89:6c:9b:ad:4c:71:1a:d2:2f:67:61:2a:82:8d:6a:fe:1c:6d:32:35:05:e0:75:04:19:c2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate printshop.wm.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for printshop.wm.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

printshop.wm.edu

Other certificates including the domain name wm.edu

(limited to 100 certificates)
sql2014dev.campus.wm.edu
info.mason.wm.edu
scholarworks.wm.edu
printshop.wm.edu
tribetrek.wm.edu
umacnas1.campus.wm.edu
image.partnerapp1.myworld.com
dilbert.physics.wm.edu
qliktest.wm.edu
people.wm.edu
blueprod2012r2.campus.wm.edu
image.partnerapp1.myworld.com
scholarworks.wm.edu
tedx.wm.edu
dilbert.physics.wm.edu
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
simpos-sql-prod.campus.wm.edu
blog.oieahc.wm.edu
gp2.wm.edu
stdirector.campus.wm.edu
image.partnerapp1.myworld.com
*.wm.edu
wmvidsquadnas1.campus.wm.edu
explore.mason.wm.edu
image.mktmarathonkids.org
studyabroad.wm.edu
mapi.wm.edu
*.wm.edu
connect.wm.edu
counseling.education.wm.edu
online.mason.wm.edu
catalog.wm.edu
edge-uc1.peopleadmin.com
*.aswp.wm.edu
printshop.wm.edu
vault.it.wm.edu
us-east-1-san1.blackboard.com
san-2-s6.tlsprovisioning.exacttarget.com
onlinemba.mason.wm.edu
scholarship.law.wm.edu
sql-wmpd1.campus.wm.edu
dilbert.physics.wm.edu
stvoicemail04.campus.wm.edu
give.wm.edu
eprint.wm.edu
vpn.aws.wm.edu
wm.edu
blackboard.com
*.wm.edu
counseling.education.wm.edu
onlinemba.mason.wm.edu
visas.wm.edu
getinfo.mason.wm.edu
calendar.wm.edu
tidewaterteam.wm.edu
*.wm.edu
sin.wm.edu
lensec2.campus.wm.edu
image.partnerapp1.myworld.com
*.libraries.wm.edu
itservices.wm.edu
us-east-1-san1.blackboard.com
image.partnerapp1.myworld.com
tribetrek.wm.edu
counselinginfo.education.wm.edu
reservations.wm.edu
us-east-1-san1.blackboard.com
scholarship.law.wm.edu
counselinginfo.education.wm.edu
geolab.wm.edu
online.mason.wm.edu
dilbert.physics.wm.edu
itstatus.wm.edu
tedx.wm.edu
wmvidsquadnas1.campus.wm.edu
visas-test.wm.edu
precollegeonline.wm.edu
helicity.physics.wm.edu
makerspace.physics.wm.edu
www.tidewaterteam.wm.edu
stli.wm.edu
sql-wmpd2.campus.wm.edu
lion2.swem.wm.edu
san-2-s6.tlsprovisioning.exacttarget.com
image.partnerapp1.myworld.com
campusrec.wm.edu
image.partnerapp1.myworld.com
it.wm.edu
devl.banner.wm.edu
connect.wm.edu
info.mason.wm.edu
online.mason.wm.edu
mylaw.wm.edu
scholarworks.wm.edu
image.partnerapp1.myworld.com
image.mktmarathonkids.org
masonfiles.wm.edu
msbaonline.mason.wm.edu
blackboard.wm.edu

Certificate

The complete raw certificate details for printshop.wm.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgISA07HBjCsHPidy8APB5elPuGwMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTkwNjUyNTlaFw0y
MDAxMTcwNjUyNTlaMBsxGTAXBgNVBAMTEHByaW50c2hvcC53bS5lZHUwggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDI/cctkjevmnz70cLc1OTF32q1Kb8R
ak4UJ6GCnC0O5zZIIVP1mBznQzmkB1k5VzbSaKNMG4b5p+mCR1vIY/ToKPMf0M+l
xUm3torOr1boyxS6MpTZH+RqkUZeWHcYrnfLZ3On7RCAyqjH4pG8IIXeiWePSVWW
8QHLrbAaevcdR7lqSwxFZH+gsHKUEPGR+SFjxlwkNHVwyTalzmwzvndwv3IZ7Tkx
wX9cfwVi3iqw+4jKl0tLIbA740KlVxmyXvi2DXipxYW7cwZswR5Zl5ZIDgkNEvWO
2BMOmq954nyxWI1B6kvImkrmR0Bfqn/AjlHITq1dDRGDuC9FE2AU4jKx7tF++V75
/RxQHuqcjbdtiV7/sX3Z+eLPJP8Rr7AoSm3863gJVsmv6c/0NpjLt6CaIgz1Wswz
pEvbIeKUbluChVEJGCS4K5/RQrvn9EMjIailYKJ/wPDX/XuwHustjhCw/KFTVIef
F3x4wjjDmhStcSE2Gw3BWjxPBTNKF1sI9nTh0/ExDa35CJ3qEdkLhMoZakm5F/V/
QZek/4qKWGMhnfwN4d9TpPHFhBMX9i4dHng+3azh7iOiGUxfqD6IDlBUQ04eFTaI
rJTqUhRyB85W9FiP9n58WmR2bt4njirq0PiaV5CV4vUzWYhL/2nMJexK45NTNPre
hYUBaTDHeurIzwIDAQABo4ICZTCCAmEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRv
GbWJmT0VmzV8GDP9vO4JFE4zYTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu
dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu
dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEHByaW50c2hvcC53bS5l
ZHUwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQC
BIH1BIHyAPAAdgDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAAAW3j
AVhxAAAEAwBHMEUCIQCDp8OQ4WpqBqPD512Jw+YOt9x6T1nrlHqLEwTjK8edRgIg
BNI6OPTt9CbskN8iw5H5czY0WvvLu6zVx2V4vuhpmt4AdgCyHgXMi6LNiiBOh2b5
K7mKJSBna9r6cOeySVMt74uQXgAAAW3jAVhqAAAEAwBHMEUCIB6jL7ihpJvetZvh
E8i/ytu5HhabzTeJCVStMXRD1vVrAiEAn0704cx04PBUHy5fXLOa+FaouvFmAx3P
YbiJp/vnvWgwDQYJKoZIhvcNAQELBQADggEBAB8T2/11wRz2Gp7YYyb5ysUM0ZRr
QEIoHY224PBHrnmJtUa4vrVf8Tht0LDl+FOXW/TtfrA5+fI8mXgiVORJeKx/MCVC
StRFticjQUpAkS+LX8W892y+QDY8ROc/gTPDTmjwEFE0+GAiZALsSWVrH6KzUSW0
kAON5n3nBPdBqa5YXYq4XsK7CnzSdT69jVDRB+mKzaHoOBtbwp2m5ORhbGV/8XeH
ZGbYhtH/QGRKnZCnm0j7XO8PY/amFEze42nflD8FRcBpa+OgYqANferHXBgxYGWZ
2fItruxLt8CSSUxoY9DELDvBzPmkRuM472xdwO5H/Cxh+w3+0cYSJBjA/iM=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288143430927248160624470521326792077140400
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-19 06:52:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-17 06:52:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'printshop.wm.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 819973048259697100959019997033847133560459862765775798626770300759921668579412921669342775547912653315748096295414780784551785114607846504978461240279342277004368906659186724564094158253041664804223513109602524261583422775615738687642051701057556347071534405531609139445858305690616280249850243469073189049587399909446467375257660019146506277396508896835296108369895569412644068981270206905468647798172732009530103669269288689892345810579027969850223408611625371238812987997297004455834440837188705205234359825656182368754869267802246192753981005947386128669006723688358350247278520681528769665373352962150623844392441589634309485587983139914920738271074342418931365742898242234383742957544847565687079729442869429734132904138915706175292441993178204350239031431038258401857661956068485559002413656974387631363550877442518490626948087933581497373513095239576535939908458500330382436753986045024647083593496931739929966025194435743224808068599929149063253182749722581521654040439525395055434305919943431174552897150494053593549706014628819885880794606748333172761806690492895375691579903242067359541076246083099659979562730941911627025350928489421100427609561191041129018880423488797129105654110904213140641535382664942894450215667919
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6f19b589993d159b357c1833fdbcee09144e3361
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printshop.wm.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016de3015871000004030047304502210083a7c390e16a6a06a3c3e75d89c3e60eb7dc7a4f59eb947a8b1304e32bc79d46022004d23a38f4edf426ec90df22c391f97336345afbcbbbacd5c76578bee8699ade007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016de301586a000004030047304502201ea32fb8a1a49bdeb59be113c8bfcadbb91e169bcd37890954ad317443d6f56b0221009f4ef4e1cc74e0f0541f2e5f5cb39af856a8baf166031dcf61b889a7fbe7bd68
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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