go.ccpe.csulb.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:59:61:90:76:61:1e:e5:12:76:02:ae:d8:c3:c8:91:f2:d3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=go.ccpe.csulb.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:59:61:90:76:61:1e:e5:12:76:02:ae:d8:c3:c8:91:f2:d3
Serial Number (int): 291751673658602055519229804942356884091603
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ad:b7:0d:a8:98:7f:61:4b:07:4c:da:d5:c2:09:1e:b9:70:84:3d:14
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c2:fd:3f:35:c6:11:82:a5:39:0b:42:23:86:f3:13:45:78:86:f1:67
Fingerprint (sha256): 0c:2f:66:a8:ab:64:e7:21:93:80:64:08:76:4d:98:d3:cb:9b:a0:71:5e:3f:9a:14:0c:c0:2e:6c:13:d2:9d:64

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate go.ccpe.csulb.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for go.ccpe.csulb.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

go.ccpe.csulb.edu

Other certificates including the domain name csulb.edu

(limited to 100 certificates)
protect.csulb.edu
giveto.csulb.edu
mail.idmdev.csulb.edu
scalefunder.net
apply.housing.csulb.edu
my.csulb.edu
printeron.ats.csulb.edu
webmail.csulb.edu
beachiddev.its.csulb.edu
beachid.csulb.edu
es-ttrak02.campus.ad.csulb.edu
scalefunder.net
its-wlan01.its.csulb.edu
scalefunder.net
its-mim02.campus.ad.csulb.edu
cslinkd.its.csulb.edu
msfinance.cob.csulb.edu
iron2.its.csulb.edu
mail.csulb.edu
elms.lats.csulb.edu
notesmail4.csulb.edu
scalefunder.net
scalefunder.net
scalefunder.net
go.ccpe.csulb.edu
keys.csulb.edu
advancetest.urd.csulb.edu
www.csulb.edu
people.ccpe.csulb.edu
csulb.edu
www.ccpe.csulb.edu
cmshrreports.cms-hr.csulb.edu
its-lyncedge01.its.csulb.edu
its-wlan02.its.csulb.edu
scalefunder.net
csulb.edu
csulb.edu
apps.coe.csulb.edu
web.csulb.edu
fm-aqmdwt.campus.ad.csulb.edu
its-wlan06.its.csulb.edu
its-lnmail02.campus.ad.csulb.edu
aar.lats.csulb.edu
ats-bomgar.ats.csulb.edu
scalefunder.net
beachid.csulb.edu
webmail.csulb.edu
www.csulb.edu
scalefunder.net
eveningmba.cob.csulb.edu
scalefunder.net
es-onbapp03d.campus.ad.csulb.edu
its-svcmgmt01.its.csulb.edu
mail.idmdev.csulb.edu
cmshrreports.cms.csulb.edu
fm-aqmdwt.campus.ad.csulb.edu
iron2.its.csulb.edu
cmshr.cms-hr.csulb.edu
its-shibd.its.csulb.edu
list.csulb.edu
go.cpie.csulb.edu
email.ccpe.csulb.edu
www.cpie.csulb.edu
courses.ccpe.csulb.edu
its-svcmgmt01.its.csulb.edu
cslinkd.its.csulb.edu
mail.ccpe.csulb.edu
its-adlds02.campus.ad.csulb.edu
coast.library.csulb.edu
vpn.csulb.edu
fns-comp-web.campus.ad.csulb.edu
thesis.lats.csulb.edu
its-adlds01.campus.ad.csulb.edu
incapsula.com
shs-pacs.campus.ad.csulb.edu
coe-remote.campus.ad.csulb.edu
adfs.upd.csulb.edu
tutortrac.aa.csulb.edu
its-adlds06.campus.ad.csulb.edu
its-lyncedge01.its.csulb.edu
parking-test.upd.csulb.edu
coast.library.csulb.edu
my.ccpe.csulb.edu
www.ccpe.csulb.edu
its-adlds07.campus.ad.csulb.edu
ipam.its.csulb.edu
incapsula.com
its-adlds02.campus.ad.csulb.edu
scalefunder.net
smtp.csulb.edu
scalefunder.net
scalefunder.net
fhr.lats.csulb.edu
ipam.its.csulb.edu
cslink.its.csulb.edu
its-adlds05.campus.ad.csulb.edu
notesapp1.csulb.edu
its-shibd.its.csulb.edu
es-ttrak02d.campus.ad.csulb.edu
spot.ats.csulb.edu

Certificate

The complete raw certificate details for go.ccpe.csulb.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgISA1lhkHZhHuUSdgKu2MPIkfLTMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMTMxOTUzMTFaFw0y
MDA0MTIxOTUzMTFaMBwxGjAYBgNVBAMTEWdvLmNjcGUuY3N1bGIuZWR1MIICIjAN
BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwxMtdXez+U0Eud5OupUQZE0xquXQ
hlcqyHwA/oo8GAd68YtnH6uWMBHQSD5aGENPqGcEZJr3TL5RP9Bdr5gzHJ4ymmN6
8Cj+Rh8o02a23tJxDrbUp4/tTNdzYbwX+AnYXYWRmxFCmhOgcpeVqhgxM1vm2gZH
MmQQfv8anQyfgpxQH3UT6avhKKacYshYwRuC65IENb4bUSax3AwElwrUxParMRRE
bML5RNqfB9hiP6CFDoUsIrsgZUNNXRk1nVi9ZxvKA8R4uYXCnA1psq9nhGK7U4Xl
2HnvPvdhMawLTB8w7S/uHjDvdJYhYd75KzyBPaDMo5NU9fdUCFbMDHLBpqkcUa/2
/MxpsjjO5576Qhza7vT31pYQMCxCJKMQInU4Rc8gyz2IJFbQvkbUiVxsq++ZNzad
UcsVBNxuCixLbLoznrU1wIpWJm0RFI9N1OJMNbBZcELPSK9FWbPzHQ8LcCIBuIw6
k8Lf6rWBH7ZpwVlPBcq0iuDVCOy/mYUR6ONiEeqXRe7ApLMm90IC5omKO6Td3t6o
8GWRkk2K+WpkkwFvfXqCcfaJ6sf3ZlyTLKgUliNHdD0PLLt5s0O119PzrbIuLuao
dq6t5HizNRi181dPHc3HWzlvqTf8jhXviPgTY2edmhSOzrJNkjyeY0JTdv53GHWL
eZws8Ls2zF0BCV0CAwEAAaOCAmYwggJiMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
rbcNqJh/YUsHTNrVwgkeuXCEPRQwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl
7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p
bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p
bnQteDMubGV0c2VuY3J5cHQub3JnLzAcBgNVHREEFTATghFnby5jY3BlLmNzdWxi
LmVkdTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG
AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkC
BAIEgfUEgfIA8AB2AAe3XBvlfWj/8bDGHSMVx7rmV3xXlLdq7rxhOhpp06IcAAAB
b6Cui6oAAAQDAEcwRQIhAN3ysmuDHeLN8PeAm/hD8Q/Ezrdvh9mz4Z3E/NMxqzUp
AiA8HKlwbgyrPy1ltxE09w/EzuZxn/5Ur5oerduAtMd5XQB2AG9Tdqwx8DEZ2JkA
pFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABb6CujFgAAAQDAEcwRQIgFWtfTUYRHR7Q
X2p0diNY4MOiySkA3FdDuI1VdgV9iIoCIQCywpT9B/d3q8ZwPla+9b9kE2rJb2iQ
N2woVdIOkQLMNTANBgkqhkiG9w0BAQsFAAOCAQEAAcpAlHWBJ5kMbmBR9uoJRrjS
VgKSzg0oV1mzB+bKi2y9rY7lXbTUkZaXO5JraRADG+Sa8TUFxFqw1FS5Ssly8XaK
rDY9F9uoTc+ygPMT9FS1LuTX7cxL5LcmeVkbFV6Y+pnHrbeoZ6JpkOD+l4lucD/e
rQFJd+TEzn/sh1jHpGjyIUHIES+C3Od5//srUr3EdlO0F6pimROlp06RszeKGMx6
UpgmQs9YxvTCdFjh9K2sxg4yGliiQzNnQvDBq6rwwYnMyDmjXNFXW9i1Ulv13MqS
HZxpP5yra77whQznm5QIIoAz/mr7ArOw/PvI05789tpFSv6RXF6MD6Iih/BOKw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291751673658602055519229804942356884091603
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-13 19:53:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-12 19:53:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'go.ccpe.csulb.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 795836209180463811258049351487313284556705720541944628993444384069119397182074433687225575094822847770038777095316469668502904485278481931149260083610114936223220083974482161023636131423709896041842788885421810327138586938112862923845062681422481563848224021507821349901956301644203258082310719480132527733423538064693902145932851379634840572026009150558900320006814052217330955026121819803924971731063378837733799447928945155558114492847434469748961689440834922137012621448769891076229864082049027820179294624320456985187323053094182687067319025548218852218776406768351179760115370629151611275149851452569874796842421076290063841602867898409486403183715789571612187819104674081951082942511974881497365002929370147898265795936430970645874542150116495600331444506543852463769011203227339883983682493028221716701263724206006524569917563598985139194706694100073186102937548471412439777713203004918612398889057377669986489195387288628852078148878054771772359739348163041593315382606765516372277807300836422873195778820840417653036189361008107870411692075795611165577357777931833722431493479082442793504580103241290540465926152295056196493110201015531607394843847024882414724293288674260092438209094420066088227993357035200811727631485277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							adb70da8987f614b074cdad5c2091eb970843d14
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.ccpe.csulb.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fa0ae8baa0000040300473045022100ddf2b26b831de2cdf0f7809bf843f10fc4ceb76f87d9b3e19dc4fcd331ab352902203c1ca9706e0cab3f2d65b71134f70fc4cee6719ffe54af9a1eaddb80b4c7795d0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016fa0ae8c5800000403004730450220156b5f4d46111d1ed05f6a74762358e0c3a2c92900dc5743b88d5576057d888a022100b2c294fd07f777abc6703e56bef5bf64136ac96f6890376c2855d20e9102cc35
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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