developer.affinity.co

Issued by R11

About this certificate

This digital certificate with serial number 04:ce:4f:33:81:14:9b:ed:cc:db:3d:4f:03:3c:2a:87:80:db was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=developer.affinity.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:ce:4f:33:81:14:9b:ed:cc:db:3d:4f:03:3c:2a:87:80:db
Serial Number (int): 418652587749624763470818568758849314455771
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 24:d3:7a:08:52:19:0d:a5:1d:be:d2:2c:01:e8:7a:1a:37:d4:d1:c4
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): c1:80:09:ee:bb:df:84:80:0a:86:b6:71:cc:85:3a:c5:55:ee:48:fd
Fingerprint (sha256): 0c:01:ba:4e:dc:85:f0:7f:e0:28:a3:1f:c7:df:09:95:9a:c5:e0:d4:9a:5d:55:e0:9c:d1:d5:96:17:30:c3:cc

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate developer.affinity.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for developer.affinity.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

developer.affinity.co

Other certificates including the domain name affinity.co

(limited to 100 certificates)
podcast.affinity.co
api-docs.affinity.co
api-docs.affinity.co
api-docs.affinity.co
api-docs.affinity.co
bearstatus.oostwestsl.com
www.affinity.co
support.affinity.co
bearstatus.oostwestsl.com
blog.affinity.co
support.affinity.co
blog.affinity.co
developer.affinity.co
remotestatus.dpconsulting.com
*.affinity.co
support.affinity.co
affinity.co
images.affinity.co
remotestatus.dpconsulting.com
bearstatus.oostwestsl.com
podcast.affinity.co
api-docs.affinity.co
api-docs.affinity.co
podcast.affinity.co
api-docs.affinity.co
support.affinity.co
support.affinity.co
bearstatus.oostwestsl.com
*.affinity.co
podcast.affinity.co
www.affinity.co
www.affinity.co
remotestatus.dpconsulting.com
remotestatus.dpconsulting.com
build.affinity.co
api-docs.affinity.co
support.affinity.co
support.affinity.co
support.affinity.co
support.affinity.co
minerva.care.ca
remotestatus.dpconsulting.com
go.affinity.co
*.affinity.co
go.affinity.co
go.affinity.co
support.affinity.co
bearstatus.oostwestsl.com
images.affinity.co
api-docs.affinity.co
api-docs.affinity.co
remotestatus.dpconsulting.com
www.affinity.co
bearstatus.oostwestsl.com
remotestatus.dpconsulting.com
mse.status.teletracking.com
www.affinity.co
api-docs.affinity.co
remotestatus.dpconsulting.com
support.affinity.co
developer.affinity.co
api-docs.affinity.co
remotestatus.dpconsulting.com
podcast.affinity.co
support.affinity.co
remotestatus.dpconsulting.com
developer.affinity.co
support.affinity.co
support.affinity.co
images.prod-dr.affinity.co
remotestatus.dpconsulting.com
support.affinity.co
bearstatus.oostwestsl.com
remotestatus.dpconsulting.com
remotestatus.dpconsulting.com
images.prod-dr.affinity.co
remotestatus.dpconsulting.com
podcast.affinity.co
*.affinity.co
remotestatus.dpconsulting.com
*.affinity.co
static.affinity.co
remotestatus.dpconsulting.com
bearstatus.oostwestsl.com
remotestatus.dpconsulting.com
developer.affinity.co
api-docs.affinity.co
support.affinity.co
api-docs.affinity.co
remotestatus.dpconsulting.com
trust.affinity.co
remotestatus.dpconsulting.com
www.affinity.co
api-docs.affinity.co
api-docs.affinity.co
map.affinity.co
vpn-dimi.affinity.co
podcast.affinity.co
podcast.affinity.co
go.affinity.co

Certificate

The complete raw certificate details for developer.affinity.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgISBM5PM4EUm+3M2z1PAzwqh4DbMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTEwHhcNMjQwNjIzMTgxMzEwWhcNMjQwOTIxMTgxMzA5WjAgMR4wHAYDVQQD
ExVkZXZlbG9wZXIuYWZmaW5pdHkuY28wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw
ggIKAoICAQCXf0nDNyIs5O8ZQBvRUAbdacSzoTxIpJI5Ot+fXjdgtmKsi4He9j4i
DA22/8zwiCB+OjQSB6CwYiu/+jpqs/CauOV8UNMFw1u/wCNm57J3DaQ7SWE1SM0k
vscXcDocxoSSd8riZqr5YCP0mf4mIqbndmE/rK63AOlxd9xJWnuNFrEDbTVJ8bG1
k5b6ZuSWucW9jDac90RW1Ox+6kzT7WhhEjfHqkRxeJwLGwIIwqImToHH9c74u48L
Gs2eFO81ZxMw96t3W1CijwQDvnZPs+esNbqmzbf6Tr+0WBZ8ppn0hBqPxadVA7AX
F9S7OVkKBBkgl1kjELG0Qntky1Pt6+m9zLhd/qlYwg+pZzSOG2wdIteELQt7xZ9d
1xeUjR4hI3yF2dryXeOoK+j95oyPGu6IOR1UCL1Rz2F95Avvr1e4LtMcarn36F6O
wbjEV/0oACR3sVazVRht8reNeVEvtzJIYJMwJrnIJ/y9pC+O/LXnOiTvxG5BvRIt
HxMXJaJj0QxpYcObX8FAK0uQ//ONgxxrQOBFPhjOFGyJMNgWV1WY7XExiSoH76x3
AhhOes+pIsNk/uJWV4r6BiYKca40+jvTVDILgBN79rCF6u1RuJfIvnxPYfRo7Ndg
qE36XBYHb6VzMHzirY07GpvMPQvWBgEMhudsYICDkGZ3YJjshV6+rwIDAQABo4IC
GDCCAhQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQk03oIUhkNpR2+0iwB6HoaN9TR
xDAfBgNVHSMEGDAWgBTFz0ak6vTDwHpslcQtsF6SLybjuTBXBggrBgEFBQcBAQRL
MEkwIgYIKwYBBQUHMAGGFmh0dHA6Ly9yMTEuby5sZW5jci5vcmcwIwYIKwYBBQUH
MAKGF2h0dHA6Ly9yMTEuaS5sZW5jci5vcmcvMCAGA1UdEQQZMBeCFWRldmVsb3Bl
ci5hZmZpbml0eS5jbzATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkC
BAIEgfQEgfEA7wB1AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/KIXs+GRuAAAB
kEaEP4IAAAQDAEYwRAIgUp08t/P9PQkhUzTbg5TZPUjfhs9Zxjey6T83Fmnec20C
ICZNnpeFgT5EG6S08P6b+RpsXhmY0MxshQ3bgD4TKvZUAHYA3+FW66oFr7WcD4Zx
jajAMk6uVtlup/WlagHRwTu+UlwAAAGQRoRARQAABAMARzBFAiAcbgA/4EeWJ3NO
mOi7RJofEBAGsigTJCnunmqJ0nDUNQIhAJYPhHYHZo0drbw7DbnB6jV3jexXDSN6
tglYxfS5DClRMA0GCSqGSIb3DQEBCwUAA4IBAQB/cMMia3QdIjJaZelnot/UKdeW
fIRVgGW7Fp2KUmMjbuX+JgcOryJPRl98X3Y9LSaSC74L72Xi7krnrhMjrj/T2cRW
2saWQBFbpwzmVHBGE1KDto1W5esIzMZ+DQrMw0bMUDtZksF29D2nuXvzrrFGWcrV
FKod0/2/cEW4OWJ6anQWdaDJFzzwgV6pMmjvBI4uxwhNhbhWMmQkhVlDiTquwWS+
yS70WQyHu9Q5b6A89g8fFri9eWKm6AzWsy0l+B0lDTqNd15kID7wCEnkXvWGBBtD
54PEQ1QYBohOtQ/GFjgKd0MSMYYK8leG0UIq6D10H7ViEvopZ5orikH9eEn8
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAl39JwzciLOTvGUAb0VAG
3WnEs6E8SKSSOTrfn143YLZirIuB3vY+IgwNtv/M8Iggfjo0EgegsGIrv/o6arPw
mrjlfFDTBcNbv8AjZueydw2kO0lhNUjNJL7HF3A6HMaEknfK4maq+WAj9Jn+JiKm
53ZhP6yutwDpcXfcSVp7jRaxA201SfGxtZOW+mbklrnFvYw2nPdEVtTsfupM0+1o
YRI3x6pEcXicCxsCCMKiJk6Bx/XO+LuPCxrNnhTvNWcTMPerd1tQoo8EA752T7Pn
rDW6ps23+k6/tFgWfKaZ9IQaj8WnVQOwFxfUuzlZCgQZIJdZIxCxtEJ7ZMtT7evp
vcy4Xf6pWMIPqWc0jhtsHSLXhC0Le8WfXdcXlI0eISN8hdna8l3jqCvo/eaMjxru
iDkdVAi9Uc9hfeQL769XuC7THGq59+hejsG4xFf9KAAkd7FWs1UYbfK3jXlRL7cy
SGCTMCa5yCf8vaQvjvy15zok78RuQb0SLR8TFyWiY9EMaWHDm1/BQCtLkP/zjYMc
a0DgRT4YzhRsiTDYFldVmO1xMYkqB++sdwIYTnrPqSLDZP7iVleK+gYmCnGuNPo7
01QyC4ATe/awhertUbiXyL58T2H0aOzXYKhN+lwWB2+lczB84q2NOxqbzD0L1gYB
DIbnbGCAg5Bmd2CY7IVevq8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 418652587749624763470818568758849314455771
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-23 18:13:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-21 18:13:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'developer.affinity.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 618054731946361128352035458973742014782260255400491830592602012193995359737674319851781078051441560124113392169454977199285208435053952074424368498732807781253304991007692477191909233408138574133001159595918839982120923377389791336834273211000792381484211880721574228537223120804578413849918785837769397892589274193888276762689544800352597934321632932134820285363229502423268614097686670401057095248009219675683184616165860257713841724276900599818030722245071755849158421184362764256393178919184352709160529092079588067270776797107489904380762610594057488942924000989502647712251943590432268495577938858702546447496177959682322790151440713117528144443850998399692892815198380530874855072324387406446603231950922902891613757946243019725535212976773256075576387457629630429378159142678467496366956442130259131320656204933371481110469842450779997599069291930065763356146289120318157677290649513880504359907064286878079627830041170286722368168422738836900302078263999129575079902386483115528158077214139824137614892153203411555405880749199389143173553333439355285659407185533036419463883220140956883665808308330516075461074754310297135026861922098098575060973866433330424854347058069246588535222087686108358818408723454972384970308239023
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							24d37a0852190da51dbed22c01e87a1a37d4d1c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.affinity.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000019046843f8200000403004630440220529d3cb7f3fd3d09215334db8394d93d48df86cf59c637b2e93f371669de736d0220264d9e9785813e441ba4b4f0fe9bf91a6c5e1998d0cc6c850ddb803e132af654007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000019046844045000004030047304502201c6e003fe0479627734e98e8bb449a1f101006b228132429ee9e6a89d270d435022100960f847607668d1dadbc3b0db9c1ea35778dec570d237ab60958c5f4b90c2951
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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