bbb.apu.edu.my

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d7:5c:d0:c0:c1:47:ab:3e:91:7a:84:6b:88:79:37:de:de was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bbb.apu.edu.my

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d7:5c:d0:c0:c1:47:ab:3e:91:7a:84:6b:88:79:37:de:de
Serial Number (int): 334620939566177156812807659981114319560414
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e6:be:8c:93:b7:65:fb:87:f4:ac:ae:20:2b:d1:66:31:35:c7:29:15
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 51:8f:3e:85:66:b8:b9:6e:6a:cf:93:5d:51:c7:50:09:96:e1:2e:43
Fingerprint (sha256): 12:e9:8a:2d:42:19:85:13:2c:96:a1:ed:7c:e9:ba:5b:1c:f7:9f:8d:f4:e5:51:89:3c:54:ef:d7:59:e3:a7:8f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bbb.apu.edu.my

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bbb.apu.edu.my

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bbb.apu.edu.my

Other certificates including the domain name apu.edu.my

(limited to 100 certificates)
www.apu.edu.my
alumniconnect.apu.edu.my
transix-admin.apu.edu.my
*.studentaffairs.apu.edu.my
eopendaytest.apu.edu.my
studentaffairs.apu.edu.my
*.apu.edu.my
*.apiit.edu.my
dingdong.apu.edu.my
bbb.apu.edu.my
apu.edu.my
www.studentaffairs.apu.edu.my
apu.edu.my
apu.edu.my
eopendaytest.apu.edu.my
www.studentaffairs.apu.edu.my
*.studentaffairs.apu.edu.my
*.apu.edu.my
*.apu.edu.my
dingdong.apu.edu.my
transix-admin.apu.edu.my
eopendaytest.apu.edu.my
apu.edu.my
www.studentaffairs.apu.edu.my
eopendaytest.apu.edu.my
*.apiit.edu.my
eopendaytest.apu.edu.my
*.apiit.edu.my
*.studentaffairs.apu.edu.my
apu.edu.my
apu.edu.my
apu.edu.my
eopendaytest.apu.edu.my
apu.edu.my
dingdong.apu.edu.my
www.studentaffairs.apu.edu.my
eopendaytest.apu.edu.my
alumniconnect.apu.edu.my
*.apu.edu.my
studentaffairs.apu.edu.my
apu.edu.my
*.studentaffairs.apu.edu.my
*.apu.edu.my
www.apu.edu.my
www.apu.edu.my
eopendaytest.apu.edu.my
*.studentaffairs.apu.edu.my
www.apu.edu.my
apu.edu.my
*.apiit.edu.my
alumniconnect.apu.edu.my
dingdong.apu.edu.my
quix.apu.edu.my
www.apu.edu.my
*.apu.edu.my
eopendaytest.apu.edu.my
transix-admin.apu.edu.my
eopendaytest.apu.edu.my
admissions.apu.edu.my
eopendaytest.apu.edu.my
*.apiit.edu.my
*.ezproxy.apu.edu.my
*.apiit.edu.my
apu.edu.my
www.apu.edu.my
quix.apu.edu.my
eopendaytest.apu.edu.my
apu.edu.my
apu.edu.my
www.apu.edu.my
quix.apu.edu.my
apu.edu.my
www.apu.edu.my
eopendaytest.apu.edu.my
*.apu.edu.my
dingdong.apu.edu.my
www.studentaffairs.apu.edu.my
apu.edu.my
apu.edu.my
alumniconnect.apu.edu.my
transix-admin.apu.edu.my
eopendaytest.apu.edu.my
www.studentaffairs.apu.edu.my
www.studentaffairs.apu.edu.my
alumniconnect.apu.edu.my
*.studentaffairs.apu.edu.my
www.apu.edu.my
quix.apu.edu.my
studentaffairs.apu.edu.my
*.studentaffairs.apu.edu.my
*.apu.edu.my
eopendaytest.apu.edu.my
transix-admin.apu.edu.my
apu.edu.my
www.apu.edu.my
www.apu.edu.my
*.ezproxy.apu.edu.my
alumniconnect.apu.edu.my
*.studentaffairs.apu.edu.my
*.exproxy.apu.edu.my

Certificate

The complete raw certificate details for bbb.apu.edu.my in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgISA9dc0MDBR6s+kXqEa4h5N97eMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMzAwMDIwNTNaFw0y
MDA2MjgwMDIwNTNaMBkxFzAVBgNVBAMTDmJiYi5hcHUuZWR1Lm15MIICIjANBgkq
hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwCHTHecBW+d4fcp06Zu+GfdajGMYwaSP
gpiq6xfBs7c1Ws/tDcWtA1Qo1sHoaUmcSriXYXJHj219g3G5TERZ1l3cSloGqPhe
+4YatMHlu93K4g+vngnCSbVnEcm/4RJZfbliscwx+Tl4+6apCndA3bsWFTIGBDct
glBeFNenc7yqUSgd5pxpPInN5J1LlERIMn3euZ/+rUn6qaNL8pqak+RwDs1SbEVP
cEmudDFTR6lZj1MvgnYl7nzCofdDpeeGod5K6L/4cItxCPN53DST4xe62jiIUIdH
NSlHMFLsNznGabAuAgsczOXPL3vgOg+Sdt2bevN3daQ1gFEydvAA6A7fzyVmIGjj
wOAKkYL55ETaVkvdPDFDay9D4QhZQzMzoUgDWyEJgRkVTVgBLtbfCC28Z04rUMgA
p4jqHRdkVtBuC5RMRWAJSdYu4fCXu/GJWpKQtGAl0hbt1Q6h+EY4Px/rJNPuNDw4
7tTFkc/aE9MZ6UddMgF802a+YnqW1sz3NO2Y6uRWtgdN73W1Ap8DS30idrFE6d58
JKEX+ULpB2tjC/at6XjnNtRuDO0bd5yteWFlQnprOjUmUstyJQGOQKsdOFvzj8Nt
Ob2R4zsQL37lB2nFZ2unr/fjM6IPkpb7/UGiZHcA5QlQzOJQpIITGFE56w+yaR/B
0M+VE/f8WoECAwEAAaOCAmEwggJdMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU5r6M
k7dl+4f0rK4gK9FmMTXHKRUwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo
7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREEEjAQgg5iYmIuYXB1LmVkdS5teTBM
BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB
FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQIGCisGAQQB1nkCBAIEgfME
gfAA7gB1AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABcSkG8x8A
AAQDAEYwRAIgFi4slBuQlxyB0FxkSOCCnUbOAI5FKbMxqCAhS+aBPvcCIHdnp7gm
iZNL0NpgBylqa3WwEm72qOicgzjEteBIAj7BAHUAB7dcG+V9aP/xsMYdIxXHuuZX
fFeUt2ruvGE6GmnTohwAAAFxKQbzQgAABAMARjBEAiBYC8HP4RhT1W9lnjA0nXsj
Ou3FoqkACVgVoDuYCVvzMQIge214gVPhXfLiue0NbHrfgwRCoNOcZXdvfFNLdfBd
UrUwDQYJKoZIhvcNAQELBQADggEBAJfBqXp6MaA/BNYOdf9Iem10zP4lCE0t+7dr
kxPBHo8/3NyqsY254RCdoP/fdf1X8o61xZjW4FgrZX/7InnM2UHFgvIRdzCmz3TL
SvOE44U+e1l+ldWg7vk1sHvJZ5UD5Zx/prjcDFnd+WPUoznWHNKPSjufF6kIm3yx
SCLDsYkXpnUKSLVB8Jnt9bu8PvcjLtRLEQWPLnf0vOqomKMgOIyx6LECqiuiNjD/
OalDOUkw0EenHPjSUBBxrnuexh4YQN5LJuhb/r9eyvuyNLSgvB3DwgzHnotfv38Q
1NecP9dgsuaXWOvnwqCAkqsHibLT4Pkrr92dfznZaywVjjLrb+k=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334620939566177156812807659981114319560414
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-30 00:20:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-28 00:20:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bbb.apu.edu.my'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 783830694789605976331220023437055348938214794201219849253774633608034215763182031510316386121399065547868033552967963571388581819112590220476404066770279303850723792449051992045650700145134695011176880320049505664014809970195569116783389154988129196446536828653349085568679259390701798054933065626331119697445261023703109507467816053877980460838491686901438611759327918361993853148835945542404109379210235342686327087859689013832140664702058822018085510852277107978663476645211492457140005402335095491320998433400704318260362493109348455037283274133145467583922411148792063445747321210019764804884777545184256845120208640533140364270971073930335191246551557048426927891015893565725382194410192735973863947000744897058548351321819619552005967633972002261003383880877900803787274927110664145010933471558042884655245349469080959915545400713743810941833887919613246156147953245395885844355274711025545830726099352091320956191361970978681767495979677529942214800291238917579809745530858044058674976547260286624395027429714973432346265901906974108955314934888173075471375314716238767125630083988407725986124691740308109316849884068526553892032568546238473768700708139258911205476469485494038023270124021128124153455250443844791544626043521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e6be8c93b765fb87f4acae202bd1663135c72915
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbb.apu.edu.my'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001712906f31f00000403004630440220162e2c941b90971c81d05c6448e0829d46ce008e4529b331a820214be6813ef702207767a7b82689934bd0da6007296a6b75b0126ef6a8e89c8338c4b5e048023ec100750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001712906f34200000403004630440220580bc1cfe11853d56f659e30349d7b233aedc5a2a900095815a03b98095bf33102207b6d788153e15df2e2b9ed0d6c7adf830442a0d39c65776f7c534b75f05d52b5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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