ssl8.revizesites.com

Issued by R3

About this certificate

This digital certificate with serial number 04:f4:58:01:87:1f:3b:19:90:3a:95:a2:4e:87:ce:06:b7:ac was issued on by Let's Encrypt.

With 42 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ssl8.revizesites.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:f4:58:01:87:1f:3b:19:90:3a:95:a2:4e:87:ce:06:b7:ac
Serial Number (int): 431595021252275562853946284154653134731180
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8d:6c:45:d3:4c:f1:ee:d7:03:ad:a7:58:12:5a:cb:f5:1c:49:48:a7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0d:bb:08:0c:0b:6b:d8:ea:1b:c4:39:5d:fb:03:ce:6f:25:2b:5c:51
Fingerprint (sha256): 0a:d4:10:ab:95:9e:a4:f3:c8:f4:41:46:df:a3:7d:94:0d:85:90:68:44:a4:c3:5a:59:dc:27:ea:0f:cb:77:89

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ssl8.revizesites.com

42

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl8.revizesites.com

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

captjeffkussusmcmemorial.com
ci.granite-falls.wa.us
cityofmeadville.org
cvcaa.org
experienceatlantatx.com
fdlband.com
fdlband.info
fdlband.net
fdlband.org
fdlrez.com
fonddulacband.com
fonddulacband.info
fonddulacband.net
fonddulacband.org
fonddulactribe.com
fonddulactribe.info
fonddulactribe.net
fonddulactribe.org
granitefallswa.gov
niagarafallsusa.org
savoy.illinois.gov
ssl8.revizesites.com
www.captjeffkussusmcmemorial.com
www.ci.granite-falls.wa.us
www.cityofmeadville.org
www.cvcaa.org
www.experienceatlantatx.com
www.fdlband.com
www.fdlband.info
www.fdlband.net
www.fdlband.org
www.fdlrez.com
www.fonddulacband.com
www.fonddulacband.info
www.fonddulacband.net
www.fonddulacband.org
www.fonddulactribe.com
www.fonddulactribe.info
www.fonddulactribe.net
www.fonddulactribe.org
www.granitefallswa.gov
www.savoy.illinois.gov

Other certificates including the domain name revizesites.com

(limited to 100 certificates)
ssl9.revizesites.com
ssl1.revizesites.com
ssl8.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl3.revizesites.com
ssl4.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl1.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl2.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl-wg1.revizesites.com
ssl2.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl9.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl1.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl-wg1.revizesites.com
ssl1.revizesites.com
ssl-wg1.revizesites.com
ssl9.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl7.revizesites.com
ssl1.revizesites.com
ssl9.revizesites.com
ssl8.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl2.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl4.revizesites.com
ssl2.revizesites.com
ssl8.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl1.revizesites.com
ssl4.revizesites.com
ssl7.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl1.revizesites.com
ssl1.revizesites.com
ssl3.revizesites.com
ssl1.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl3.revizesites.com
ssl9.revizesites.com
ssl9.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com
ssl2.revizesites.com
ssl7.revizesites.com
ssl1.revizesites.com
ssl7.revizesites.com
ssl-wg1.revizesites.com
ssl4.revizesites.com
ssl8.revizesites.com
ssl8.revizesites.com
ssl7.revizesites.com
ssl4.revizesites.com
ssl3.revizesites.com
ssl-wg1.revizesites.com
ssl-wg1.revizesites.com
ssl8.revizesites.com

Certificate

The complete raw certificate details for ssl8.revizesites.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 431595021252275562853946284154653134731180
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-02 14:25:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-31 14:25:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl8.revizesites.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4536508226356798647079190384852677758672470539787141662442499968244181512236576924263537099267384880374382934078388869038871919664874260624275615752620319855663434044795263963658373947126391914126242765448600697419688765528584990847194176801717271736966536327558620123262071006078412146464288067959672228369668686834323530905933706699367125146326956982052896173980213686588471461319349015391321246917284342291154935525806442012185934725127182610525871379954044684627734149644413850931929248742685279029334859141214800484892861696549565517683791631270860365037141229757695284346576620202428375304283020606584929224119170893538382971368636134358209239765127848019131354454790618210263433731905236531175969417122557068875941311219215978431225863761460246888934277557121387775744247151451055189387461226542301613215369373146274982297058541316680519158411063960303677250388410426911218611477895325271504217296962387883373283517571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8d6c45d34cf1eed703ada758125acbf51c4948a7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (875 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captjeffkussusmcmemorial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci.granite-falls.wa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityofmeadville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvcaa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experienceatlantatx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fdlband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fdlband.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fdlband.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fdlband.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fdlrez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fonddulacband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fonddulacband.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fonddulacband.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fonddulacband.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fonddulactribe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fonddulactribe.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fonddulactribe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fonddulactribe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'granitefallswa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niagarafallsusa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savoy.illinois.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl8.revizesites.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.captjeffkussusmcmemorial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci.granite-falls.wa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityofmeadville.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cvcaa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.experienceatlantatx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fdlband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fdlband.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fdlband.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fdlband.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fdlrez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fonddulacband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fonddulacband.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fonddulacband.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fonddulacband.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fonddulactribe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fonddulactribe.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fonddulactribe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fonddulactribe.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.granitefallswa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.savoy.illinois.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f39e96dfa000004030047304502201eb68385e8c2b2f3cfc130c265572b3fa1f2942e924cca14101d92559a6bee90022100b80e35df6093cb0d0d9bc48aebdcbf96c9fdfff69bc891c8b03aa42daf38332c00770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f39e96f370000040300483046022100d80ee7998ccab37c3e793bc4a32410b01b3bd2633a46d70a1f6b62b22b7cc4af022100aee5803608823aa5f64a6174c8bc7dca845de95f27c36b5e2a6331206d8664a7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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