ytec.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:81:f7:97:b9:c5:8c:fe:27:46:cf:08:ce:4c:c1:63:46:b5 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ytec.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:81:f7:97:b9:c5:8c:fe:27:46:cf:08:ce:4c:c1:63:46:b5
Serial Number (int): 305562390247763674551106927994403087926965
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c6:45:f3:10:40:cc:ee:9f:79:1b:39:7f:09:e1:a3:fa:1a:17:a7:66
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7f:f9:36:67:7d:d1:cc:6f:98:b2:53:a3:7b:13:42:20:24:a1:19:d1
Fingerprint (sha256): 0b:e9:af:c6:87:79:0a:68:4b:f0:bf:a5:7f:4b:49:c1:86:70:92:1f:cf:8d:09:58:38:fb:72:1a:25:57:36:56

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ytec.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ytec.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ytec.ca
ytec.ca

Other certificates including the domain name ytec.ca

(limited to 100 certificates)
tickets.ytec.ca
sandbox.rpcadmin.sauvara.com
todohierromaldonado.com.uy
crm.ytec.ca
j4k.cz
game.keystonecrusade.com
tickets.ytec.ca
ytec.ca
digitized.ytec.ca
whereami.ytec.ca
mdbin.ytec.ca
heterizeinfotech.com
tracmor.ytec.ca
fax.ytec.ca
ytec.ca
www.upliftnow.net
sni240765.cloudflaressl.com
unifi-video.ytec.ca
ytec.ca
www.crictrac.com
samad.fr
ytec.ca
ytec.ca
hm.afivn.com
object-storage.ytec.ca
dev.ytec.ca
pequenieses.com.ar
inscripciones.app
www.gia.re
registry.gitlab.ytec.ca
ws.ytec.ca
acmebroker.ytec.ca
sni240765.cloudflaressl.com
sni240765.cloudflaressl.com
ytec.ca
www.imobiliarialink.com.br
owncloud.ytec.ca
ozak.co
tickets.ytec.ca
sheriff.dev
meet.ytec.ca
ytec.ca
gitlab.ytec.ca
object-storage.ytec.ca
sni240765.cloudflaressl.com
sni240765.cloudflaressl.com
courses.learn2build.in
www.yakomc.pl
ytec.ca
object-storage.ytec.ca
ytec.ca
ytec.ca
sni240765.cloudflaressl.com
sni240765.cloudflaressl.com
www.collegeoptionsfoundation.net
www.vinijlawfirm.com
www.ytec.ca
digitized.ytec.ca
www.wfviana.com.br
ytec.ca
drdanilofcruz.com.br
sheriff.dev
docker.ytec.ca
ytec.ca
mta-sts.ytec.ca
ytec.ca
sni240765.cloudflaressl.com
sni240765.cloudflaressl.com
www.agritunasmakmur.com
sentry.ytec.ca
devweeklima.com
brizuela.mx
object-storage.ytec.ca
crm.ytec.ca
crm.ytec.ca
id.ytec.co
www.downloads.iarahealth.com
crm.ytec.ca
ytec.ca
sni240765.cloudflaressl.com
issues.ytec.ca
season2018.devfest.bg
sni240765.cloudflaressl.com
id.ytec.co
rc.ytec.ca
sni240765.cloudflaressl.com
crm.ytec.ca
israelblennerhassett.com
crm.ytec.ca
fax.ytec.ca
rtw.ytec.ca
email.ytec.ca
pbx.ytec.ca
start.ytec.ca
object-storage.ytec.ca
whereami.ytec.ca
acmebroker.ytec.ca
serieso.com
claims.web.opc.joinedup.io
memble.app

Certificate

The complete raw certificate details for ytec.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGBjCCBO6gAwIBAgISA4H3l7nFjP4nRs8IzkzBY0a1MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA3MTkxNTEwMzBaFw0x
ODEwMTcxNTEwMzBaMBIxEDAOBgNVBAMTB3l0ZWMuY2EwggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQDBPdKxN/qbIlIM6mVO0CLeBo10kpn4WR0nDVdTKukc
eoRZ+rRWmtVpyOv2ZueuDiVXox8FtmfqGUAL6K9vcgz7qsKgmxVHENALcoh34Fxt
cDrEf7B0bVbbv1S/syp3o0+xHlYo7RXjUoc4sSsKXmDRnzJW/y3tQfCpALTeXj3B
vv6ARtwGsLBbj3XLC6+K3gFmgNItJvDhyLNSXy7vM0Lz9jniyAAIZ2wwifs5drfO
d+R13T3+cttO7TmuUlSLx7ZP/mbsQYu3BMx+8NwKNbV86cFR3XgTZe2DQobnhaoe
mvE4y24Ferqvm9xKCJRcREV6hejrYKmjWYM4yrSbrEwLAgMBAAGjggMcMIIDGDAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwG
A1UdEwEB/wQCMAAwHQYDVR0OBBYEFMZF8xBAzO6feRs5fwnho/oaF6dmMB8GA1Ud
IwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggr
BgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggr
BgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHwYD
VR0RBBgwFoILd3d3Lnl0ZWMuY2GCB3l0ZWMuY2Ewgf4GA1UdIASB9jCB8zAIBgZn
gQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz
LmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmlj
YXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBh
bmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGlj
eSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzCC
AQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLc
pMMM9OVFR/R4AAABZLNOmbIAAAQDAEcwRQIhANTWXDlOP05mUOrcCNMKOsm9tHgK
khhB4vXlVnkcV+RPAiBxc54TfkrIqWTn0omLxrVN//JPC/HqoSav+2ZvSBaClQB2
AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAABZLNOnOUAAAQDAEcw
RQIgJSnNCP2/qIHrhfiumsP2Y3VxVDPjFJpggg8MKoP7AxMCIQCKm8w417RfmmsT
fgu6pYasSHn5/4M1j/JiKb2j0E9dxDANBgkqhkiG9w0BAQsFAAOCAQEAghw+sTMv
GwxNeRSvgVS7TeonumCuI+y91PXOa6FQabIwTRF2iUKR9M5gWgco1ymEHDCAqG7L
G6ej9zoYoJdLN4wOOKNNCF77wZx1v7vqLaE/KXb51NJLCVelzNuQ1my5WecS/hz2
kNhzFowkJpsnBIeRrHQvbfN8vpSuCj6FmTTQ6riWv8jUcMvcuapk7RvUZ1i172yH
0RjDk0Tz0hDVkAxdSns/oeodTGKJn7H4v9j5XGvLzKj7+hrhu1TsKbJ9ygnEC81U
0hH7ZK+G2fnAhJx+dMZb0NmyJK6D5H4FzAeXjZZUf0fmf/Y4w856mJ3zH7f8Q/EI
9lTkO0IRGZSRIQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT3SsTf6myJSDOplTtAi
3gaNdJKZ+FkdJw1XUyrpHHqEWfq0VprVacjr9mbnrg4lV6MfBbZn6hlAC+ivb3IM
+6rCoJsVRxDQC3KId+BcbXA6xH+wdG1W279Uv7Mqd6NPsR5WKO0V41KHOLErCl5g
0Z8yVv8t7UHwqQC03l49wb7+gEbcBrCwW491ywuvit4BZoDSLSbw4cizUl8u7zNC
8/Y54sgACGdsMIn7OXa3znfkdd09/nLbTu05rlJUi8e2T/5m7EGLtwTMfvDcCjW1
fOnBUd14E2Xtg0KG54WqHprxOMtuBXq6r5vcSgiUXERFeoXo62Cpo1mDOMq0m6xM
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305562390247763674551106927994403087926965
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-19 15:10:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-17 15:10:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ytec.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24394478924186846834603028184449460239666854608993644140046803543116823746881282012647865329260981231393199094523106640959726758031580917204578977463048386252181304833859592782943083961944737343631695506290985808509586905710949903178883252896998395552454714347445751138646767346841059235800622752260876544894597782618689847857156975393392154097669582265140587208660226722372219851323582110583034995587362260546832370487512681301073025804007728782608557565104516919989021378906543077781448674404902298060345608184887383279755027280127774948920609874872141672684698526902703767056801381794890688376285206629263956790283
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c645f31040ccee9f791b397f09e1a3fa1a17a766
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ytec.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ytec.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000164b34e99b20000040300473045022100d4d65c394e3f4e6650eadc08d30a3ac9bdb4780a921841e2f5e556791c57e44f022071739e137e4ac8a964e7d2898bc6b54dfff24f0bf1eaa126affb666f481682950076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000164b34e9ce5000004030047304502202529cd08fdbfa881eb85f8ae9ac3f66375715433e3149a60820f0c2a83fb03130221008a9bcc38d7b45f9a6b137e0bbaa586ac4879f9ff83358ff26229bda3d04f5dc4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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