bookstore.zaytuna.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4f:50:d3:9e:c8:df:e2:20:15:43:6e:ee:e9:bb:77:c2:2e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bookstore.zaytuna.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4f:50:d3:9e:c8:df:e2:20:15:43:6e:ee:e9:bb:77:c2:2e
Serial Number (int): 288326601816870461077690372514261337883182
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b8:4c:5e:63:b3:8d:61:5e:c7:11:5a:b7:e0:13:b4:3b:d4:07:f8:04
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bb:04:c0:94:a1:0d:33:89:04:42:21:a0:8c:74:ce:8d:61:4e:00:c7
Fingerprint (sha256): 0f:f4:35:42:e6:d7:02:8f:f6:57:55:56:ad:7b:0e:fb:5a:a1:3e:95:81:2a:30:cb:9c:39:d2:3b:50:37:01:51

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bookstore.zaytuna.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bookstore.zaytuna.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bookstore.zaytuna.edu

Other certificates including the domain name zaytuna.edu

(limited to 100 certificates)
bookstore.zaytuna.edu
sni248639.cloudflaressl.com
securedns.planmygift.org
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
plannedgiving.zaytuna.edu
securedns.planmygift.org
bookstore.zaytuna.edu
plannedgiving.zaytuna.edu
dev.zaytuna.edu
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
securedns.planmygift.org
sni248639.cloudflaressl.com
bookclub.zaytuna.edu
securedns.planmygift.org
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
securedns.planmygift.org
sni248639.cloudflaressl.com
blog.zaytuna.edu
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
securedns.planmygift.org
bookstore.zaytuna.edu
plannedgiving.zaytuna.edu
sni248639.cloudflaressl.com
plannedgiving.zaytuna.edu
sni248639.cloudflaressl.com
securedns.planmygift.org
sni248639.cloudflaressl.com
securedns.planmygift.org
plannedgiving.zaytuna.edu
securedns.planmygift.org
sni248639.cloudflaressl.com
securedns.planmygift.org
securedns.planmygift.org
plannedgiving.zaytuna.edu
securedns.planmygift.org
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
dev.zaytuna.edu
securedns.planmygift.org
dev.zaytuna.edu
bookstore.zaytuna.edu
sni248639.cloudflaressl.com
securedns.planmygift.org
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
plannedgiving.zaytuna.edu
plannedgiving.zaytuna.edu
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
info.zaytuna.edu
sni248639.cloudflaressl.com
blog.zaytuna.edu
securedns.planmygift.org
plannedgiving.zaytuna.edu
dev.zaytuna.edu
securedns.planmygift.org
sni248639.cloudflaressl.com
securedns.planmygift.org
info.zaytuna.edu
securedns.planmygift.org
securedns.planmygift.org
staging.renovatio.zaytuna.edu
securedns.planmygift.org
plannedgiving.zaytuna.edu
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
securedns.planmygift.org
info.zaytuna.edu
info.zaytuna.edu
plannedgiving.zaytuna.edu
plannedgiving.zaytuna.edu
staging.renovatio.zaytuna.edu
bookstore.zaytuna.edu
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
securedns.planmygift.org
sni248639.cloudflaressl.com
dev.zaytuna.edu
sni248639.cloudflaressl.com
staging.renovatio.zaytuna.edu
securedns.planmygift.org
sni248639.cloudflaressl.com
sni248639.cloudflaressl.com
plannedgiving.zaytuna.edu
*.zaytuna.edu
securedns.planmygift.org
plannedgiving.zaytuna.edu
securedns.planmygift.org
plannedgiving.zaytuna.edu

Certificate

The complete raw certificate details for bookstore.zaytuna.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFYzCCBEugAwIBAgISA09Q057I3+IgFUNu7um7d8IuMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMTYwNzMzMjlaFw0y
MDA1MTYwNzMzMjlaMCAxHjAcBgNVBAMTFWJvb2tzdG9yZS56YXl0dW5hLmVkdTCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANKXRxG2Z+ynJAOG82S+6+tl
rA2APyubFm3TAwH6gTpYm+iV+hQFrQDMvEhiKUNUAqCPj49pOOiYkdxm3UIJdfNQ
N2j8mUtpinOHpcPwPqzU8uorhTUhOPWtNvsjq3fRu7J0fPRLaxg86S1ZJFRb1GjV
ldzjfbBpkKoVsKH5xcD/95VehvGC+ZioE9hzhnS8SZGxu87ccNyMt2z1xrtCiprA
ZgdalaWtnhMm7yYUxAetrfeWF5PGXmrEeR6SOPfkIdZIirhbZy86qCcunHwrVReZ
mMRJmmdYx76bqZnBTDCqm+M5/yQ0Vx0PmA4PER9aSrCVizoxX3pTyLKQEgXZrCsC
AwEAAaOCAmswggJnMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUuExeY7ONYV7HEVq3
4BO0O9QH+AQwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB
BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnLzAgBgNVHREEGTAXghVib29rc3RvcmUuemF5dHVuYS5lZHUwTAYD
VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa
aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHz
APEAdwAHt1wb5X1o//Gwxh0jFce65ld8V5S3au68YToaadOiHAAAAXBNIY+rAAAE
AwBIMEYCIQCXrI143h33OQ5BZ3bCOduOAgmGtKe/BKzgg8G9Vl1IXAIhAOtocPUQ
oPwe0BByBCVMrms+vknPI9St/oMKYQVPLOuKAHYA5xLysDd+GmL7jskMYYTx6ns3
y1YdESZb8+DzS/JBVG4AAAFwTSGPUQAABAMARzBFAiAkx3gZK0x4pN/FruWi3uAV
nJI8oS6timD8gLkWd3B/5wIhAJJIZqrH0pXR1aIfwzwV+KNRn0eBGo6ZcIVbMu9m
70bYMA0GCSqGSIb3DQEBCwUAA4IBAQCKO5Vg/3jNjrSbI6qaj9AnM5PSeZpC4J+R
Q7yuCFuARIQkDYJ1glmzxgCFq390oSQ4JSN3FXNAmfIjkJudQL4OqyWyLwjxpDZP
a5SJO4LwybA11yyk3iMX47QUGPyl8wr6igTmvZshmuYN6sdePhj2U8tZJr+nHpkZ
9vgoxwYUlBdYVYVmsKxWx4M6zrOU26zuLaJvASJd7dILht/ppR5SZOcuSEH9+J+M
/L9HcANyYTiMYa7vKsn1jJxaJHNOzUbZz+GCnVWELoEUycncNpJkvKQld5Mvsmiq
tXRS9MNjrhdwa1WHXXfsdnQ/SoC0N4E8e7vLJXEbzu6Z1vtMS8Q1
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pdHEbZn7KckA4bzZL7r
62WsDYA/K5sWbdMDAfqBOlib6JX6FAWtAMy8SGIpQ1QCoI+Pj2k46JiR3GbdQgl1
81A3aPyZS2mKc4elw/A+rNTy6iuFNSE49a02+yOrd9G7snR89EtrGDzpLVkkVFvU
aNWV3ON9sGmQqhWwofnFwP/3lV6G8YL5mKgT2HOGdLxJkbG7ztxw3Iy3bPXGu0KK
msBmB1qVpa2eEybvJhTEB62t95YXk8ZeasR5HpI49+Qh1kiKuFtnLzqoJy6cfCtV
F5mYxEmaZ1jHvpupmcFMMKqb4zn/JDRXHQ+YDg8RH1pKsJWLOjFfelPIspASBdms
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288326601816870461077690372514261337883182
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 07:33:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-16 07:33:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bookstore.zaytuna.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26584641814643418260948581131356074070023523483236353504795842678107196340663602085257899487816926711966503403010084090649395182296062166419178867848269591170628354820865671610665082125873792375445791523143289620600456736471138029041788583761614408782079710492038985968958630002358683659271835606495499423973097331417593450829768114511979186147368433934002875824957937054422437279142736251373637580098848766665817023464105111957159737775625045337067747018463691396930051520751817593605074196524963973256070698515389529715071038801741095303636857932857364155563936862901768554767860804789376917087071084816027321216043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b84c5e63b38d615ec7115ab7e013b43bd407f804
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookstore.zaytuna.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001704d218fab000004030048304602210097ac8d78de1df7390e416776c239db8e020986b4a7bf04ace083c1bd565d485c022100eb6870f510a0fc1ed0107204254cae6b3ebe49cf23d4adfe830a61054f2ceb8a007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001704d218f510000040300473045022024c778192b4c78a4dfc5aee5a2dee0159c923ca12ead8a60fc80b91677707fe7022100924866aac7d295d1d5a21fc33c15f8a3519f47811a8e9970855b32ef66ef46d8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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