geoserver.hel.fi

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:80:32:c6:c4:0a:b2:cc:33:fc:67:2b:3f:90:22:50:35:1d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=geoserver.hel.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:80:32:c6:c4:0a:b2:cc:33:fc:67:2b:3f:90:22:50:35:1d
Serial Number (int): 304960494211927998091681439164757764486429
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 38:77:2e:fd:cb:7b:00:db:1d:fc:17:67:ca:40:2e:52:8c:4f:d2:d3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2f:98:5e:aa:7a:1d:9b:78:47:46:1f:ee:ac:6d:1d:d2:e4:1d:41:a6
Fingerprint (sha256): 18:59:69:74:f1:23:32:12:78:ce:11:6b:4c:54:1d:76:31:3e:98:3e:e3:5f:80:0e:54:80:d8:7d:8f:55:d8:3c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate geoserver.hel.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for geoserver.hel.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

geoserver.hel.fi

Other certificates including the domain name hel.fi

(limited to 100 certificates)
liikuntakauppa.hel.fi
digi.hel.fi
shared2.anders.fi
www.kasarmitorinkesa.hel.fi
*.edu.hel.fi
koulurekisteri.hel.fi
*.movendosplatform.com
numerot.hel.fi
dev.hel.fi
misi.hel.fi
kehmet.hel.fi
tilanvaraus.edu.hel.fi
muistopaikat1918.hel.fi
linkedevents.hel.fi
ohjaamo.hel.fi
varaamo.hel.fi
digineuvonta.hel.fi
palvelukeskus.crm.hel.fi
kerrokantasi.hel.fi
securemail2.hel.fi
tyoterveys.ajanvaraus.hel.fi
toimintaymparisto.hel.fi
api.hel.fi
kerrokantasi.hel.fi
beeblebrox.edu.hel.fi
shared2.anders.fi
keskustelu.hel.fi
omastadi.hel.fi
huonevaraus.hel.ninja
linkedevents.hel.fi
pohjavesi.hel.fi
opehuone.edu.hel.fi
opehuone.fi
uutiskirjeet.hel.fi
varaamo.hel.fi
webmail.ish.edu.hel.fi
digi.hel.fi
helluntaiseurakunta.fi
osallistu.hel.fi
ideapaahtimo.osallistu.hel.fi
*.movendosplatform.com
kruunusillat.hel.fi
helvi.hel.fi
shared2.anders.fi
huonevaraus.hel.ninja
omastadi.hel.fi
finalsite.net
numerot.helmi.hel.fi
kaupunkitilaohje.hel.fi
koulurekisteri.hel.fi
linkedevents.hel.fi
*.lib.hel.fi
*.movendosplatform.com
kerrokantasi.hel.fi
koulurekisteri.hel.fi
shared2.anders.fi
uutiskirjeet.hel.fi
www.att.hel.fi
nextlevel.hel.fi
nextlevel.hel.fi
numerot.helmi.hel.fi
geoserver.hel.fi
linkedevents.hel.fi
www.hel.fi
eterveys.hel.fi
ohjaamo.hel.fi
palvelukartta.hel.fi
linkedevents.hel.fi
webcal.edu.hel.fi
api.hel.fi
www.influenssarokotus.hel.fi
geoserver.hel.fi
palvelukeskustest.crm.hel.fi
sts.hel.fi
servicekarta.hel.fi
turvalomake.hel.fi
sip.hel.fi
palvelukartta.hel.fi
winhawiivi.edu.hel.fi
digi.hel.fi
helluntaiseurakunta.fi
brand.hel.fi
numerot.hel.fi
uutiskirjeet.hel.fi
misi.hel.fi
palvelukartta.hel.fi
numerot.helmi.hel.fi
www.kruunusillat.fi
dev.hel.fi
beeblebrox.edu.hel.fi
nextlevel.hel.fi
tilajakehitys.hel.fi
*.movendosplatform.com
dev.hel.fi
tiedonohjaus.hel.fi
tiedonohjaus.hel.fi
api.hel.fi
securemail.hel.fi
aromi.hel.fi
numerot.helmi.hel.fi

Certificate

The complete raw certificate details for geoserver.hel.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgISA4AyxsQKsswz/GcrP5AiUDUdMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTEwOTM0MTlaFw0y
MDAzMTAwOTM0MTlaMBsxGTAXBgNVBAMTEGdlb3NlcnZlci5oZWwuZmkwggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDwMbcK+J/wKb2Ts/yQZ7I9St0dFZQX
0IDURY/Fx0UcKoPJ7GD58bgs+XNHb814oS0EzYYV7g9TsOUlpQyngQe8HKU4qUv9
CLX1Lh1q2tOpDucJ7B3pDf2i0skEvAdnpYH6eBzwzDVvwqbbgsHY+YX355jLMteh
WgVC3qlJc6aNsKa5zQC6K3OieaNlCnUt8dZWMmSJkrlvZXxQtrK+pUmp1o/SnBp5
AlSacWUG7loT4O5IU7hDll0pa17KvmM4UoKFF0dSTpVhA66jgpg4/ln+U7ASAvxw
Ap10/JDvbAfCIujPc/ZR+I9RLEBrrQoccQHzPa9lESlha/SrV/KTEKUNUcP6GAM5
0kSWy96spRWjV6hrovDn2We6Jwya4cfQbRzES6N2LMU2Kgzkz9WgVUeRreylqpU9
EnMGvCivW/POwhaKD1qw/bVNtFeehyeC1B6sn0UV7ic4zvqL9bXFeJP1NM1vB2En
uQp7HApl+P3LiZjZDNP5ff1yLe/O/2SuXCpZ11qiYPzirfIpDp4XNR8ltZQefDMs
8uhgmoyS/RrqOsHFmBoppzuHUkEf61Af4YJXB/EzwmW8RtXIBCrSZY5JIsIulAH4
QbLShASEuxFtKw8mEiHwG1XVUabP7isoUi5OC+7YaZ1o4e7czCSamf3mUvO/5m0P
5VD1dNq8AImWjwIDAQABo4ICZTCCAmEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQ4
dy79y3sA2x38F2fKQC5SjE/S0zAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu
dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu
dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEGdlb3NlcnZlci5oZWwu
ZmkwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQC
BIH1BIHyAPAAdgCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAW70
hhhFAAAEAwBHMEUCIGopTCZgtFQPL8TA4Xe6ib4Y58NL5BSn2/FTE585x6+NAiEA
+vQ+IQ2sL2wqPVS+3yo2Gf/nuHljl05Z+fBgz67dIHMAdgBvU3asMfAxGdiZAKRR
Ff93FRwR2QLBACkGjbIImjfZEwAAAW70hhhzAAAEAwBHMEUCIQDnfVkgLIG/EbQS
hj6HS4rZNyACE4qPPFUpL+/cOZ4AXAIgPFDjhka00GyIS22e44Vk2m5lm92rIoUa
QonxBt2ZH20wDQYJKoZIhvcNAQELBQADggEBAG7kFS/8sYq5GZy6qImzgSYAoKHR
WaDtJ/zsh+OqBaY7v+u65wH4VdGiDMRvIOhmgmBm4xEQfxm1oFrFgQC1A1AbvFeA
cf/BafjKUHbsmQiYvu+oZxrKVLTwDiPCu9gkoTlLVcKvu4pTtWFvNfQkm8WI+DqA
6OeMeEU4lwQJQu7M5D8toiebnoNkP04lqjlaBPcdfb4sc+dP5vIsLGXL6FBfuopW
KTmgXf27DvveHaXDcH+YUTkFRPbjWmIKzMIkBccOvQKZVt5Oru2ggXqebSoW4bLW
I6T0a6uVPwo5d9ra+epuJrla8Xy35ccEFhkflIhyO4F6wAzKC/4JtC9uPTs=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 304960494211927998091681439164757764486429
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-11 09:34:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-10 09:34:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'geoserver.hel.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 979906840193418522085082327418901767362584360251915653963332345065412426040158161416393100331431834219288384786353310747938412847999230947835944340636386779392038746728808208340649693891005079012305751017265744397508699693466014282777157504513837742303761400553893992158323810461603178213995598320385330059274698535550262486689125794487335797220090740978206836479428343824069303664843192113143218607580835532124840120662745496833838104753547100885599725627428190309264005874288551883729711454894517245989388773310126651887055689557784214731826754732182347393802469419754851734717323806013523335320947557177417999999254282850912566070147054313310780661309959585170604998826485249581312350474445461266567089965590207701068484684191155326356708805363408236903204047522549014880454886966520007482951892728802348734163793025841488423021928620259588565466577985645499449315976887942261675184626711706391950216381714714139026393450258028754258453351997113693344519822035115060037655856381455082153378927724768570573420321110110389761626795506741406547981898747247852295492385274764537533190406587890738136420111940627821454870188148556389742359356394599639550812262366003107773384049249682805061813193769113959172516037531750664189805958799
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							38772efdcb7b00db1dfc1767ca402e528c4fd2d3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geoserver.hel.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ef4861845000004030047304502206a294c2660b4540f2fc4c0e177ba89be18e7c34be414a7dbf153139f39c7af8d022100faf43e210dac2f6c2a3d54bedf2a3619ffe7b87963974e59f9f060cfaedd20730076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ef48618730000040300473045022100e77d59202c81bf11b412863e874b8ad9372002138a8f3c55292fefdc399e005c02203c50e38646b4d06c884b6d9ee38564da6e659bddab22851a4289f106dd991f6d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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