pureportal.strath.ac.uk

Issued by R3

About this certificate

This digital certificate with serial number 04:db:5d:cd:b4:00:17:a8:8e:74:14:6f:52:1a:bf:a1:99:0a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pureportal.strath.ac.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:db:5d:cd:b4:00:17:a8:8e:74:14:6f:52:1a:bf:a1:99:0a
Serial Number (int): 423095668358031557485600137716746640529674
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4a:57:b5:bc:27:bb:c0:cc:53:2e:dc:90:d9:8c:84:97:d7:0a:42:87
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 85:47:80:69:b0:5a:1a:6f:61:98:c0:70:50:b4:4f:80:d4:c3:d7:1f
Fingerprint (sha256): 10:75:e1:3f:6c:d9:cd:fa:41:06:d5:41:f8:2a:e1:d5:30:3d:6f:52:47:60:2d:12:9b:68:d9:04:04:f0:ea:c2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate pureportal.strath.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pureportal.strath.ac.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pureportal.strath.ac.uk

Other certificates including the domain name strath.ac.uk

(limited to 100 certificates)
ewds8.strath.ac.uk
its-adfs-f1.ds.strath.ac.uk
digitalassets.strath.ac.uk
sr-test.mis.strath.ac.uk
teledir.strath.ac.uk
ewds.strath.ac.uk
nourishcatering.strath.ac.uk
sbs-chain.sbs.strath.ac.uk
phys.strath.ac.uk
smtphost.cis.strath.ac.uk
cord.bioe.strath.ac.uk
ewds2.strath.ac.uk
new-t4-test.is.strath.ac.uk
training.myplace.strath.ac.uk
content.sbs.strath.ac.uk
its-scom-ms1.ds.strath.ac.uk
frm-eval1.is.strath.ac.uk
activeforpeace.net
spider.science.strath.ac.uk
fback-dsp.is.strath.ac.uk
aria-dev.eee.strath.ac.uk
aria-dev.eee.strath.ac.uk
adm-ts14.ds.strath.ac.uk
www.medea.gsb.strath.ac.uk
content.sbs.strath.ac.uk
guides.lib.strath.ac.uk
pureportal-staging.strath.ac.uk
pgrapps.strath.ac.uk
inteum.strath.ac.uk
ewds2.strath.ac.uk
local.cis.strath.ac.uk
vle.stams.strath.ac.uk
t4-test.is.strath.ac.uk
sunbird.strath.ac.uk
pfact.strath.ac.uk
ewds4.strath.ac.uk
fms.strath.ac.uk
outreach.mathstat.strath.ac.uk
www.cis.strath.ac.uk
inteum.strath.ac.uk
stage.myplace.strath.ac.uk
www.coshh.strath.ac.uk
digitool.lib.strath.ac.uk
sensible.eee.strath.ac.uk
www.alumni.strath.ac.uk
www.cis.strath.ac.uk
ewds.strath.ac.uk
innovation.strath.ac.uk
but.mis.strath.ac.uk
platform.sbs.strath.ac.uk
dev-ocs-aes.tds.strath.ac.uk
5gsummit.eee.strath.ac.uk
autodiscover.eee.strath.ac.uk
onlineshop.strath.ac.uk
5gsummit.eee.strath.ac.uk
gada.strath.ac.uk
smtphost.cis.strath.ac.uk
ewds8.strath.ac.uk
www.sbs.strath.ac.uk
aria-dev.eee.strath.ac.uk
tcnemo.strath.ac.uk
classes2016-2017.myplace.strath.ac.uk
erp-bus-2.ds.strath.ac.uk
www.coshh.strath.ac.uk
activeforpeace.net
cord.bioe.strath.ac.uk
www.metabolomics.strath.ac.uk
www.intranet.sbs.strath.ac.uk
supportal.dmem.strath.ac.uk
mercury.sbs.strath.ac.uk
5gsummit.eee.strath.ac.uk
oracles.eee.strath.ac.uk
new-og.is.strath.ac.uk
platform.sbs.strath.ac.uk
beta-www.strath.ac.uk
map.cis.strath.ac.uk
imaphost.cis.strath.ac.uk
devweb2016.cis.strath.ac.uk
soolin.mis.strath.ac.uk
hub.is.strath.ac.uk
metro.mis.strath.ac.uk
pc-usage.its.strath.ac.uk
db-peg-test.is.strath.ac.uk
pureportal.strath.ac.uk
netlogin-dev.strath.ac.uk
DigiDocs.strath.ac.uk
devweb2018.cis.strath.ac.uk
simple4.ds.strath.ac.uk
www.imagesofresearch.strath.ac.uk
www.studygroup.com
mcampus.strath.ac.uk
classes.myplace.strath.ac.uk
pureportal.strath.ac.uk
map.cis.strath.ac.uk
naglog.is.strath.ac.uk
hub-web1.is.strath.ac.uk
pgrapps.strath.ac.uk
lss.mathstat.strath.ac.uk
aria-dev.eee.strath.ac.uk
api-sims-train.is.strath.ac.uk

Certificate

The complete raw certificate details for pureportal.strath.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgISBNtdzbQAF6iOdBRvUhq/oZkKMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA0MjUxMTAxNTBaFw0yMzA3MjQxMTAxNDlaMCIxIDAeBgNVBAMT
F3B1cmVwb3J0YWwuc3RyYXRoLmFjLnVrMIICIjANBgkqhkiG9w0BAQEFAAOCAg8A
MIICCgKCAgEA2rEEsmuPvLzvclrYCvxtm3au5XpxB5h1gAWrYniYqk8W/5K5RqaK
1eUBwi2bzmAeIiEPfSSX812F5BKYK0Na5AWnsr8H1KNXTfkf4eOiAzUCYnxYssan
JRyCjFaB/FtUG8OX+8M2502p+ZALP3tpbvr/HgfUQP/VA0BcMYaYHkvoUcfagnuy
WU+UPL92Qd7gZJmg1MaAt/l4Yr9rabbx3CrxbluGUHQSp0i5vRWKDYeKwPXAEB+x
mLLyyZ+YZV9NRnOT8lF5WvkiXiCLWCC/04D6CGg80+D2qtfJIDXahQe8Te2RjkGj
SKBr1MbfBSXPqrTIS8ymmkdCloWld4csMwTQazDj/r7/Br2QdIOsHRwgISKUDeic
NfNWvmmlHUApOZNrjetaDhDZbpumyR5+dfnwNfah/Ci6Lvo/JAZxr+2XVeusoFFf
4AZX+DDVCFFRkvbxtkyJ8/jqKgHX6PuCNuYNSt0N5Ugi2mVH22PFTcPuwasEZzKU
9PQ+RsngoadiW7CqGdcYCqV/W3l5GdWFQ3BHQWTXwwgMotn5du6fL/QXK15Vg7IZ
fwZX3tvH0OxtR06vVzimGcsnzPksi9Edc1THxk431u8r0zHtanhR6WoLdWrVmN4M
8Kpa+cFQB4gAZG7/0YzydKIuD+O9HWocYdgJDc9btvhv5v37/eC2D9kCAwEAAaOC
AlQwggJQMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUSle1vCe7wMxTLtyQ2YyEl9cK
QocwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEE
STBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUH
MAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wIgYDVR0RBBswGYIXcHVyZXBvcnRh
bC5zdHJhdGguYWMudWswTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB
AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEG
BgorBgEEAdZ5AgQCBIH3BIH0APIAdwB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9Ir
wTpXo1LrUgAAAYe4Sp3VAAAEAwBIMEYCIQD+hlxryTRk3xy7NxUdVIFooV9CJOdB
6+xBXukRv3OkagIhAP3LvWhHW12HsPNoMW+3SOHwu54IlWS8sDAPKGoLjAm8AHcA
6D7Q2j71BjUy51covIlryQPTy9ERa+zraeF3fW0GvW4AAAGHuEqd2AAABAMASDBG
AiEAqtYEZ4aw7m73bHLgvespWrDgiSggD1Nw5XLThThEL8gCIQCJLGlzAdpNj35f
POPW6QwVPemyUkRutMRs8qWKKQq6cTANBgkqhkiG9w0BAQsFAAOCAQEAKPiil0Dm
QT6eGv5QpdGQnKcK1ZqEYw5bWlkFwvqOb5xMYyYhI0F7TVf5VsnKGQMWCc2R/5iZ
5f8Dzl05hGqB3RdG8oTOwDA00jZrQKqakvYtQi5LB9ybrC1S/sapJMkG19RPKuGi
a2jNnXxyN4CanpmJ6l3b+QrxRPG96MGJd+tR5GJdGJXHyfYNrYv5+JEjgoCjKjqQ
wB27DNMSXLrYhAJHJDwjeBEtQlDGtY2m8zHlwZK4lMFpUBnE+w07SkTYWB7lAIxP
0uibri3C8Dq6UJcgAybq4uEKuEu4hPrFwyAdIHMP04pnhAcDg9oP9Wr4Vk9ZjAwA
veHit5J4RVbWMw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 423095668358031557485600137716746640529674
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-25 11:01:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-24 11:01:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pureportal.strath.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 892183390622175277943691816519256266870577125853049881969191352632696670607792758986142551713226520610788301493276587636586545601922968991736083688236323729795472788424206732431927984413025056653563584307834398141583042026476282909721240548764506211837890309727866877292265215144021900075939246022333169543341433362065388242756075338450157746896983668558237805868380652052148284123041403556207373499946176323184507620532594390462606100015873665324183593081198930510458685664825602933853694936546906369297714666433551486631529487682342542836587518130390648870420453512790739571030980454447772728200067476739141292164209582769606689671268486943150893663348068645543539783667079504044453978816251759096810084559459519226145424191210010347604053933500126339185711011249732124760068779906900194003197395560107996505541058721879087825003196969537769345516023145647632763375101719304517348546761041679118692301860992197691662916866392955661834514997386224072101884275639281280506342171744228387464053753235367377068913037130700852501235447622365181620129489919780341789768250627648621079698127557536930240118253989242963131124509863561134218005735587577538297692851450917711760964466889285100203435835166574198809761354267138763496441122777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a57b5bc27bbc0cc532edc90d98c8497d70a4287
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pureportal.strath.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187b84a9dd50000040300483046022100fe865c6bc93464df1cbb37151d548168a15f4224e741ebec415ee911bf73a46a022100fdcbbd68475b5d87b0f368316fb748e1f0bb9e089564bcb0300f286a0b8c09bc007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000187b84a9dd80000040300483046022100aad6046786b0ee6ef76c72e0bdeb295ab0e08928200f5370e572d38538442fc8022100892c697301da4d8f7e5f3ce3d6e90c153de9b252446eb4c46cf2a58a290aba71
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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