avivacommunityfund.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a9:84:22:ff:21:db:38:7b:33:27:ba:44:96:11:3e:41:60 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=avivacommunityfund.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a9:84:22:ff:21:db:38:7b:33:27:ba:44:96:11:3e:41:60
Serial Number (int): 319020217613152963137482857985469572858208
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 95:9e:56:77:d7:76:a5:8c:85:3a:b2:30:64:fd:1e:b4:90:de:4b:a7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 54:a2:89:be:bf:a2:df:35:7a:61:da:b0:d4:47:e0:cd:5b:6b:a4:4e
Fingerprint (sha256): 18:27:9b:7c:fd:ff:ca:dc:13:a8:c0:40:93:93:63:7f:5a:48:40:e1:8b:32:09:19:59:71:cb:a7:fa:d0:4f:f0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate avivacommunityfund.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for avivacommunityfund.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

avivacommunityfund.co.uk

Other certificates including the domain name avivacommunityfund.co.uk

(limited to 100 certificates)
cert01.uk.aviva.com
cert01.uk.aviva.com
cert01.uk.aviva.com
cert01.uk.aviva.com
cert01.tmp.aviva.com
avivacommunityfund.co.uk
avivacommunityfund.co.uk
avivacommunityfund.co.uk

avivacommunityfund.co.uk

avivacommunityfund.co.uk
avivacommunityfund.co.uk
avivacommunityfund.co.uk
cert01.uk.aviva.com
cert01.tmp.aviva.com
www.aviva.co.uk
cert01.uk.aviva.com
cert01.tmp.aviva.com
cert01.tmp.aviva.com
avivacommunityfund.co.uk
avivacommunityfund.co.uk
www.avivacommunityfund.co.uk
cert01.tmp.aviva.com
no.avivainvestors.com
avivacommunityfund.co.uk
cert01.tmp.aviva.com
avivacommunityfund.co.uk
cert01.uk.aviva.com
cert01.tmp.aviva.com
avivacommunityfund.co.uk
cert01.tmp.aviva.com
avivacommunityfund.co.uk
cert01.tmp.aviva.com
avivacommunityfund.co.uk
avivacommunityfund.co.uk
cert01.tmp.aviva.com
cert01.uk.aviva.com
cert01.uk.aviva.com
cert01.uk.aviva.com
avivacommunityfund.co.uk
cert01.tmp.aviva.com
avivacommunityfund.co.uk
avivacommunityfund.co.uk
avivacommunityfund.co.uk
cert01.uk.aviva.com
avivacommunityfund.co.uk
cert01.uk.aviva.com
cert01.uk.aviva.com
www.avivacommunityfund.co.uk
avivacommunityfund.co.uk
avivacommunityfund.co.uk
www.aviva.co.uk
www.avivacommunityfund.co.uk
avivacommunityfund.co.uk
cert01.tmp.aviva.com
avivacommunityfund.co.uk
cert01.tmp.aviva.com
avivacommunityfund.co.uk
avivacommunityfund.co.uk
avivacommunityfund.co.uk
cert01.uk.aviva.com
cert01.uk.aviva.com
cert01.tmp.aviva.com
avivacommunityfund.co.uk
avivacommunityfund.co.uk
avivacommunityfund.co.uk
cutredtape.co.uk
avivacommunityfund.co.uk
avivainvestors.lu
avivacommunityfund.co.uk
cert01.tmp.aviva.com
cert01.uk.aviva.com
cert01.uk.aviva.com
avivacommunityfund.co.uk
avivacommunityfund.co.uk
avivacommunityfund.co.uk
avivacommunityfund.co.uk
cert01.uk.aviva.com
cert01.tmp.aviva.com
www.aviva.co.uk
avivacommunityfund.co.uk
avivacommunityfund.co.uk
cert01.tmp.aviva.com
avivacommunityfund.co.uk
cert01.tmp.aviva.com
avivacommunityfund.co.uk
avivacommunityfund.co.uk
cert01.tmp.aviva.com
cert01.tmp.aviva.com
avivacommunityfund.co.uk
avivacommunityfund.co.uk
cert01.uk.aviva.com
avivacommunityfund.co.uk
avivacommunityfund.co.uk
www.avivacommunityfund.co.uk
cert01.tmp.aviva.com
avivacommunityfund.co.uk
avivacorporateplatform.co.uk
cert01.uk.aviva.com

Certificate

The complete raw certificate details for avivacommunityfund.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFaTCCBFGgAwIBAgISA6mEIv8h2zh7Mye6RJYRPkFgMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMjUxODQzMjVaFw0x
OTA2MjMxODQzMjVaMCMxITAfBgNVBAMTGGF2aXZhY29tbXVuaXR5ZnVuZC5jby51
azCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMSonHUP1+s92iUJHJfx
77eJIxrTCSrkAAeYP+brgP53X7s97s8dWD3FWnxC1iK94NR6/s1ksCi2NJiIWW75
6KgAI6+wzUaR1si6SYKJHC0Eqlahti/rSWwiyc9X75uJJzhNJg09ib7VrQHEeZSR
rdVzAmeT8pkZpVxFPyO+UjDIkIFd1fldcndWNy5wIgOCU0djwr/3Ed8mH/U7O1vy
lKMgHFC6kB2l7HOam9SkDCYy3gRl9BEu5VWbMV63NtRbclIOFWduhQKVsOcMr4X3
v49mBdF5AJQPYymfVa+LoFYlTPxXcp1FhdkSiMZVknIAYDhUe5IpjpAS4fU892+a
KHUCAwEAAaOCAm4wggJqMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUlZ5Wd9d2pYyF
OrIwZP0etJDeS6cwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI
KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0
c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0
c2VuY3J5cHQub3JnLzAjBgNVHREEHDAaghhhdml2YWNvbW11bml0eWZ1bmQuY28u
dWswTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQC
BIH2BIHzAPEAdwB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWm2
YQQBAAAEAwBIMEYCIQCiW4Dw5jfw480sg3JUj1g4TQIQu/grJRDlGzoe+GriTQIh
AMwZ+0uUu4RXuaub2Y2CHkJNKf7MK4IYPb2kS26H2S8nAHYAKTxRllTIOWW6qlD8
WAfUt2+/WHopctykwwz05UVH9HgAAAFptmED+AAABAMARzBFAiBQlZpDsR812zGF
D++qIQXlNCThBh+jrbU6L5jhIx3i9gIhAIzISui/ZQ5i+t8tFSU8M890wXf01FoR
XJlFSXm3vyV0MA0GCSqGSIb3DQEBCwUAA4IBAQAUECexQ7Dyc7qq2JC9M8VEuCoq
+WRPNRiDLuHwfFwPSCuWUsmXdmncPY6/n8MhISVFZY8LCaq6tvIBBF2It9FBsMSI
DGvnpjeXfoZNrpRgRmvR1C7vO6D4fntK06XfB9aZTi6Z3GWIUChjAGLvnWQ00L0l
r1IHBogxxGqgg6lUjqzU+dNe+FyhMFslgy612bgARrdxM6Q4Cox/cHzP9Ozv3zjR
sSZ8EGeydN16Jl00p3iXiN1UgqY+qNH73w7zR/qmzYQb6ZQh3HWt2fhFe01NXc1W
lEKHrhRvopPpRymRWsAkTVfSrHB1cBG/9b67mRAlrNMLv2wenakX77oornKb
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKicdQ/X6z3aJQkcl/Hv
t4kjGtMJKuQAB5g/5uuA/ndfuz3uzx1YPcVafELWIr3g1Hr+zWSwKLY0mIhZbvno
qAAjr7DNRpHWyLpJgokcLQSqVqG2L+tJbCLJz1fvm4knOE0mDT2JvtWtAcR5lJGt
1XMCZ5PymRmlXEU/I75SMMiQgV3V+V1yd1Y3LnAiA4JTR2PCv/cR3yYf9Ts7W/KU
oyAcULqQHaXsc5qb1KQMJjLeBGX0ES7lVZsxXrc21FtyUg4VZ26FApWw5wyvhfe/
j2YF0XkAlA9jKZ9Vr4ugViVM/FdynUWF2RKIxlWScgBgOFR7kimOkBLh9Tz3b5oo
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319020217613152963137482857985469572858208
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-25 18:43:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-23 18:43:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'avivacommunityfund.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24825853035812754610870153268791590019635546940996229210480164567897530995792217780644245957875700416173129730942058333737747080339042988601287443230360472030954043385018144144352730142508285609202290412850033604493661363404374788755795974557749789232500778430799720194998331254479860486972982158716718381591186429731765575175719482276159101085087614144437759715345083242793861627531360289211588503562483034232919943262445242156764586031173953344649008733393211868229265908349522301433880181581096004786648603609163035792631546336542462971727169425612691258359735803499542398507319898387263743963817977342032086706293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							959e5677d776a58c853ab23064fd1eb490de4ba7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivacommunityfund.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169b66104010000040300483046022100a25b80f0e637f0e3cd2c8372548f58384d0210bbf82b2510e51b3a1ef86ae24d022100cc19fb4b94bb8457b9ab9bd98d821e424d29fecc2b82183dbda44b6e87d92f27007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169b66103f80000040300473045022050959a43b11f35db31850fefaa2105e53424e1061fa3adb53a2f98e1231de2f60221008cc84ae8bf650e62fadf2d15253c33cf74c177f4d45a115c99454979b7bf2574
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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