www2.plastics.saint-gobain.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:12:3b:93:72:6a:64:3f:bc:b4:3c:f0:92:31:69:01:ee:26 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www2.plastics.saint-gobain.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:12:3b:93:72:6a:64:3f:bc:b4:3c:f0:92:31:69:01:ee:26
Serial Number (int): 267541130439871052535616082267438158310950
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 06:13:54:a7:e3:a6:6b:b3:a4:85:b7:6e:4c:6d:9f:ea:2e:e6:fc:f5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 73:ba:6e:e7:20:bf:0d:b9:b8:c2:8c:2b:99:ef:96:9e:55:ce:65:93
Fingerprint (sha256): 10:bc:01:92:8a:87:b1:f4:bb:6e:c6:a2:4b:f0:53:33:c1:e5:96:97:cf:8e:19:b7:eb:c6:ae:36:4d:f4:4a:93

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www2.plastics.saint-gobain.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www2.plastics.saint-gobain.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www2.plastics.saint-gobain.com

Other certificates including the domain name saint-gobain.com

(limited to 100 certificates)
imperva.com
mobilemail2.saint-gobain.com
imperva.com
www.chartercampaign.saint-gobain.com
*.extranet.saint-gobain.com
www.saint-gobain.com
www.saint-gobain.com.tr
www.saint-gobain.com
www.saint-gobain.com.tr
pprugmobileservice.saint-gobain.com
bimlibrary.saint-gobain.com
www2.plastics.saint-gobain.com
imperva.com
design-challenge.saint-gobain.com
ppmobilemail.saint-gobain.com
boost.glass.saint-gobain.com
multimedia.newsletter-im.saint-gobain.com
incapsula.com
store.processsystems.saint-gobain.com
*.website4sg.saint-gobain.com
mail5.saint-gobain.com
gec.saint-gobain.com
bimauthorization.saint-gobain.com
surveys.saint-gobain.com
www.blackpool-powertools.co.uk
incapsula.com
customersmdm-ceramics-int.saint-gobain.com
employee.saint-gobain.com
prosource.app.saint-gobain.com
uat.valueplus.saint-gobain.com
imdf-userguide.im.saint-gobain.com
securelogin.saint-gobain.com
*.fts.saint-gobain.com
www.saint-gobain.fr
www.repairservices.sefpro.com
pprugmobileapps.saint-gobain.com
incapsula.com
boost.sekurit.saint-gobain.com
www.saint-gobain.com
fr-partners.ras.saint-gobain.com
www.bearings.saint-gobain.com
valmobilemailpki.saint-gobain.com
valrugmobileapps.saint-gobain.com
mobilemail2.saint-gobain.com
www.refractories.saint-gobain.com
partners.weber.saint-gobain.com
www.bearings.saint-gobain.com
imperva.com
exch.saint-gobain.com
business-challenge-2018.saint-gobain.com
imperva.com
valrugmobileapps.saint-gobain.com
api.o365guestaccessreview.saint-gobain.com
midco.saint-gobain.com
sip.saint-gobain.com
ftp.boost.sekurit.saint-gobain.com
ftp.boost.sekurit.saint-gobain.com
sga-userguide.im.saint-gobain.com
mail6.saint-gobain.com
catalog.biopharm.saint-gobain.com
store.saint-gobain.com
api.cockpit.saint-gobain.com
uat.cloudgateway.saint-gobain.com
videos.saint-gobain.com
customer-eu.lifesciences.saint-gobain.com
store.processsystems.saint-gobain.com
imperva.com
mail10.saint-gobain.com
benelux-register.saint-gobain.com
go.nordic.saint-gobain.com
mdm-uatsupplier.im.saint-gobain.com
*.fts.saint-gobain.com
catalog.biopharm.saint-gobain.com
*.im.saint-gobain.com
webmail.saint-gobain.com
giws.saint-gobain.com
www2.plastics.saint-gobain.com
*.notilus.saint-gobain.com
surveys.saint-gobain.com
www.saint-gobain.com
valmobilemail.saint-gobain.com
www.saint-gobain.com
www.saint-gobain.com.tr
www.bearings.saint-gobain.com
mdm.saint-gobain.com
www.saint-gobain.com
partners.weber.saint-gobain.com
colibri.saint-gobain.com
www.bearings.saint-gobain.com
peg.saint-gobain.com
bimlibrary.saint-gobain.com
easyload.isogypfr.saint-gobain.com
imperva.com
bimlibrary.saint-gobain.com
www.saint-gobain.com.tr
www.blackpool-powertools.co.uk
flyover2019.saint-gobain.com
guest.saint-gobain.com
*.saint-gobain.com
marketing-development.saint-gobain.com

Certificate

The complete raw certificate details for www2.plastics.saint-gobain.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGdDCCBVygAwIBAgISAxI7k3JqZD+8tDzwkjFpAe4mMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMDcwODI5MTBaFw0y
MDA2MDUwODI5MTBaMCkxJzAlBgNVBAMTHnd3dzIucGxhc3RpY3Muc2FpbnQtZ29i
YWluLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAN2qmvU7dsvF
Oujvq9DQ2d8fW8N3jUvQ7zFO1JN57Zf3kqTGTy82OKro6AF4CTtL1HKMxD0juOCM
kTmcmLrZfLOhVcmqAsZdOUjU84K2c2e+xfF/0Ockh//n47ty5kkhvCSbODqF0KNa
FiTiBiznCaaGMQnVxOpA22ELgQGoycQxp4yW0LkZekg7978vcIYaTPypeau7tKdK
zNGEAUCHkJ5xWRII6Jp0B+HkZ7/Zh8dYDO/01UUQbmbRQyoeeHSBs7QVSGFbbHvU
x44UVRy24RicbaOsjt27wDbma9Rg4lrIer8gRdAEFptefErTRwLiDqdy3WVuJ83K
XM3zRiCpt+RxkMrA9lhh6ae+My7eMC/n5ZK2J8Mhkt5hu5ep5K/4ByZT4AygHIck
pk3Tdw+ZwuzoYYKLOApNIQiNTl2ZCu+d19Bmi0zyZl6lg/rbTwcNAP/ABUTC7h6i
pqAws/yf+s9f6owfYJQholtC0ALgrykAIbupZuw94sOTQ8VuW3V7611VTfp/MWnb
mum6VhvtlsXX+OjGC1h35iy0q2qWjXm6ZwD+3+HdCysmdgEIv9Sg+V8buPOxlH40
ACLN4nb5o36CLLwRNNWSEhwFM05LkoS9C6Wzc+5rPy5oVtPUcPPUJdZtJCT3Y2DK
upRGKJfZhURrPjWKs3hHgWZygk3rVkSrAgMBAAGjggJzMIICbzAOBgNVHQ8BAf8E
BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQC
MAAwHQYDVR0OBBYEFAYTVKfjpmuzpIW3bkxtn+ou5vz1MB8GA1UdIwQYMBaAFKhK
amMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYi
aHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYj
aHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wKQYDVR0RBCIwIIIe
d3d3Mi5wbGFzdGljcy5zYWludC1nb2JhaW4uY29tMEwGA1UdIARFMEMwCAYGZ4EM
AQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0
c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAXqdz+d9WwOe1
Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFwtFO5SwAABAMARzBFAiBFzPIWzcoF
pzwlPByzjY3dB5cpTLyuIiTgrV2oQvLOpwIhAKIHem6/ueuucmhGVZhiSEPOPkKk
v4zfvZTe70nSc77JAHYAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4A
AAFwtFO5RAAABAMARzBFAiEA6lHheU5QWuNgu1phHNffpVsQc5lP9lEKoQEJbws+
i40CIDxw/P5/+OtSE1qEJw0VD5NMPptawbFLg8cdKoZbTSDYMA0GCSqGSIb3DQEB
CwUAA4IBAQAAovGNxEURq1WXcByUh14bh1tIfAObm2gQ/c0Y5Y5eeShTYgdQS9bm
7GExFW/uOdtRtu3uFTNc6KVIWOCAwhm/d39+e/fYFv/NbE4zDSyCwSbWBvo49MbV
DzpCL1N6B4SGY+WMX8D3/kK6N39d8IVCPlhCRwvWhQF4xxMoE+cWKgl+oIg8gukV
ji5s7TGwUQaYeeSfi2K7R4sRxv9LgLmualv8uk4dn8J+Jv5dOVG5NI6fz0mMdnB9
u03+DZc4U4WR4hRwNcWKdoFcqDABp1fxlDh0dMwuyfbUnf6wtmZ80bj4OQRtCSTK
cCwH4tkYPtAMCKKFfCELzCMbywsLlRE7
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267541130439871052535616082267438158310950
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-07 08:29:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-05 08:29:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www2.plastics.saint-gobain.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 904320123869411492871857454534160570703495666871936830935446103984662369167665707509342107473224831332987099097181112324922320178161223079295701139144671813852566719417480819952500699017331430448519437924119749891452175193806898163428643578128846729275265731522700358160203625935437423172426490403067950490099195676039271371558617070324405072444696800044119908789865105457488918975685337852547341207847784803544881777882283271297951852847539456146535604793254867433527529451771370449356588234381497581822166547904393417062151441423770949155074790092690738739357800470175577883927811572897431820345406499365427838554504902495831178266498183413842132050438164537003189284922866874337870261044468035651984643826123278343322243178336629562751813100920832499970601074767054926362226076041949003650571983916882156774689562629414485256598169304814707328357635453717584002129451050166103172266347278112972139174423934932585338608381576879217617680034629180988978820388027727362175635991865828420272037765050816857028179998367194904993077558925685927596554524571048173147870225155542623719708324495292298336206334856486777594209662561120287245056578981830917923945445704483869946610628526561980852611959425135357437000305440419111630527677611
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							061354a7e3a66bb3a485b76e4c6d9fea2ee6fcf5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.plastics.saint-gobain.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170b453b94b0000040300473045022045ccf216cdca05a73c253c1cb38d8ddd0797294cbcae2224e0ad5da842f2cea7022100a2077a6ebfb9ebae7268465598624843ce3e42a4bf8cdfbd94deef49d273bec9007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170b453b9440000040300473045022100ea51e1794e505ae360bb5a611cd7dfa55b1073994ff6510aa101096f0b3e8b8d02203c70fcfe7ff8eb52135a84270d150f934c3e9b5ac1b14b83c71d2a865b4d20d8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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