wszoeken.edurep.kennisnet.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:37:a8:5c:b8:be:e9:7a:10:dc:02:86:64:e2:a7:5b:c9:be was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=wszoeken.edurep.kennisnet.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:37:a8:5c:b8:be:e9:7a:10:dc:02:86:64:e2:a7:5b:c9:be
Serial Number (int): 280276179717624182026619244208864412551614
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 89:b3:cb:47:ac:72:1a:09:ef:40:4b:ab:d3:d6:b3:e4:a9:1b:d2:06
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 46:f3:24:87:96:e8:1e:bb:8b:f5:6a:f0:e6:94:32:e3:6b:bc:38:fc
Fingerprint (sha256): 10:10:0e:ba:88:f2:e4:d1:ca:5c:1d:5b:ec:bf:38:c9:89:1a:c1:96:fa:e5:7f:61:68:be:f9:ae:c6:d9:4e:82

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate wszoeken.edurep.kennisnet.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wszoeken.edurep.kennisnet.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prod8.edurep.seecr.nl
wszoeken.edurep.kennisnet.nl

Other certificates including the domain name kennisnet.nl

(limited to 100 certificates)
images.kennisnet.nl
images.kennisnet.nl
developers.wiki.kennisnet.nl
monitor.bks.kennisnet.nl
red.portal-p.kennisnet.nl
metaplus.kennisnet.nl
ict-puzzel.kennisnet.nl
proeftuinrekenen.kennisnet.nl
hksbrowser.kennisnet.nl
jenkins.bks.kennisnet.nl
kennisnet.nl
onderzoek.kennisnet.nl
forms.kennisnet.nl
webmail.kennisnet.org
bks.kennisnet.nl
wiki.kennisnet.nl
xsd.kennisnet.nl
test.kernprogrammabrowser.kennisnet.nl
images.kennisnet.nl
ict-puzzel.kennisnet.nl
referentie.entree.kennisnet.nl
metaplus.kennisnet.nl
monitor.bks.kennisnet.nl
onderzoek.kennisnet.nl
*.kennisnet.nl
kennisnet.nl
bks.kennisnet.nl
kennisnet.nl
inspiratiekaart.kennisnet.nl
hksbrowser.kennisnet.nl
kennisnet.nl
kennisnet.nl
tools.kennisnet.nl
pld-po.kennisnet.nl
bks.kennisnet.nl
test.kernprogrammabrowser.kennisnet.nl
kernprogrammabrowser.kennisnet.nl
wszoeken.edurep.kennisnet.nl
testvoorziening.kennisnet.nl
bks.kennisnet.nl
jenkins-federatie.bks.kennisnet.nl
hksbrowser.kennisnet.nl
monitor.bks.kennisnet.nl
bks.kennisnet.nl
forms.kennisnet.nl
kennisnet.nl
kennisnet.nl
inspiratiekaart.kennisnet.nl
kennisnet.nl
prd.onderzoek.kennisnet.nl
testvoorziening.kennisnet.nl
test-validatieservice.kennisnet.nl
bks.kennisnet.nl
edurepdemo.kennisnet.nl
osr-api.kennisnet.nl
grotestoring.kennisnet.nl
images.kennisnet.nl
bks.kennisnet.nl
ssonot.aselect-s.entree.kennisnet.nl
monitor.bks.kennisnet.nl
inspiratiekaart.kennisnet.nl
red.portal-p.kennisnet.nl
ssoquery.aselect.entree.kennisnet.nl
entree-account.kennisnet.nl
test.kernprogrammabrowser.kennisnet.nl
kennisnet.nl
entree.confederatie.kennisnet.nl
jenkins-oso.bks.kennisnet.nl
referentie.entree.kennisnet.nl
referentie.entree.kennisnet.nl
wsdl.kennisnet.nl
developers.wiki.kennisnet.nl
vocabulaires.kennisnet.nl
client.vpn.kennisnet.nl
images.kennisnet.nl
pld-po.kennisnet.nl
ict-puzzel.kennisnet.nl
artifactory.bks.kennisnet.nl
jenkins-federatie.bks.kennisnet.nl
sql.mta.kennisnet.nl
edurepdemo.kennisnet.nl
*.kennisnet.nl
*.bks.kennisnet.nl
xsd.kennisnet.nl
onderzoek.kennisnet.nl
test.kernprogrammabrowser.kennisnet.nl
red.portal-a.kennisnet.nl
test.hksbrowser.kennisnet.nl
bks.kennisnet.nl
monitor.bks.kennisnet.nl
entree-account.kennisnet.nl
proeftuinrekenen.kennisnet.nl
red.portal-p.kennisnet.nl
harvester.edurep.kennisnet.nl
grotestoring.kennisnet.nl
servicecheck.kennisnet.nl
wiki.kennisnet.nl
kort.dev.kennisnet.nl
pld-po.kennisnet.nl
grotestoring.kennisnet.nl

Certificate

The complete raw certificate details for wszoeken.edurep.kennisnet.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgISAzeoXLi+6XoQ3AKGZOKnW8m+MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMDcwMzA1MDBaFw0y
MDA1MDcwMzA1MDBaMCcxJTAjBgNVBAMTHHdzem9la2VuLmVkdXJlcC5rZW5uaXNu
ZXQubmwwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUtNO1ZtpHWqyV
SQDGpdPGZWqH5utFs4GIMzBiVLhAvpk3/uVsGqOWYOtB4NcNSCAfxNGB8c67ni5E
C2L6132ZrXJwQDt2AIU21uXZq25r8MDo92sgiEI0gwyFVKBkcW1zni0zr1KilJQe
utMc4fbNkITfiv3shWOPxC29LfdIwC0t+iNewuWEuzYsGqRLTdQjdYq47/dHzdgl
BWuOzCbLwsnEq0+CWSKtgO7PWwxRArDFb+FhbZQtuLSmi0+htFMbctreTuoNBY9m
vfOGYs8k7qQKRm7YOXsK+AjOSlEf95hEAdkNcb71zL1BxKLfT9R4GAKgbnkvb3kZ
sOIuxuSjAgMBAAGjggKKMIIChjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFImzy0es
choJ70BLq9PWs+SpG9IGMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh
MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZy8wPgYDVR0RBDcwNYIVcHJvZDguZWR1cmVwLnNlZWNy
Lm5sghx3c3pvZWtlbi5lZHVyZXAua2VubmlzbmV0Lm5sMEwGA1UdIARFMEMwCAYG
Z4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMu
bGV0c2VuY3J5cHQub3JnMIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcA8JWkWfIA
0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFwHdKFmgAABAMASDBGAiEA71c2
/DObkwBGKByv9tUNJXzatAkKWdhA3qbAb+jO1G8CIQCd0cPRMTPu8Fr/xtw5kYlz
/vhNRQp9uNoXvby5MmZSHgB3ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3v
i5BeAAABcB3ShbMAAAQDAEgwRgIhAKffVjJZZQ/nv6+Yedzzuzi3hdWDOfBAiQNt
EFQZenu6AiEA6spRfEy8dL6JjGIF4XdFEjVFRT4Mwu25GVWpJl++NNwwDQYJKoZI
hvcNAQELBQADggEBAEuhOqcCYzgv6XxKXEGz/8f0zvTgFaW5Qt7iTb/vJ73pzzOe
xGPlQgy1zVn7dVqIYrflizKHXE3JrCIUXPXwwATlfoMe/pA/SeZZDIM4GJhq+k9F
p4L/LX141lCfjjw76yF50cgkR2j94MU66D1Rv830q1hRy5mFeczuWzxo63vCPF6O
Txk43A5zCAS0SPGSanBcW9cAwmU7gROPQgYwz0Sjd05I0RvcTaUB06ph/O19s3BU
yr7ypW3PJfWdOqAP9A3ANI6b5JfJNCldJ2yFezV3uFLa1iMsuoXdV9uLoBQ1hd2B
X/nhWg2TmMfmGELPs0SN+DzG+2IEKVwQ7Ne9MH4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LTTtWbaR1qslUkAxqXT
xmVqh+brRbOBiDMwYlS4QL6ZN/7lbBqjlmDrQeDXDUggH8TRgfHOu54uRAti+td9
ma1ycEA7dgCFNtbl2atua/DA6PdrIIhCNIMMhVSgZHFtc54tM69SopSUHrrTHOH2
zZCE34r97IVjj8QtvS33SMAtLfojXsLlhLs2LBqkS03UI3WKuO/3R83YJQVrjswm
y8LJxKtPglkirYDuz1sMUQKwxW/hYW2ULbi0potPobRTG3La3k7qDQWPZr3zhmLP
JO6kCkZu2Dl7CvgIzkpRH/eYRAHZDXG+9cy9QcSi30/UeBgCoG55L295GbDiLsbk
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280276179717624182026619244208864412551614
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-07 03:05:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-07 03:05:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wszoeken.edurep.kennisnet.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26851689763334970613247290541237665740974760775755082063834758416826536573391038013752907712305222657627180393862097306567210574160499181050442503227638734807743901364432227824750691540101676014094850567243127217173193416720701298138116145339550640942191491533494215757301148097303570814691011413926925538916312334124675968359537833329260214439698126207888022195587028544154195011976399993238557187682081278758607489131826106149405478684341199126119257488236808047429204272006831891746988820667351153981217348973447473320670530924113246164250974890773423357360787998278166689444566556513906436863988720107244145271971
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							89b3cb47ac721a09ef404babd3d6b3e4a91bd206
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod8.edurep.seecr.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wszoeken.edurep.kennisnet.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001701dd2859a0000040300483046022100ef5736fc339b930046281caff6d50d257cdab4090a59d840dea6c06fe8ced46f0221009dd1c3d13133eef05affc6dc39918973fef84d450a7db8da17bdbcb93266521e007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001701dd285b30000040300483046022100a7df563259650fe7bfaf9879dcf3bb38b785d58339f04089036d1054197a7bba022100eaca517c4cbc74be898c6205e17745123545453e0cc2edb91955a9265fbe34dc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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