gitlab.it.ilstu.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:06:d7:55:8d:6d:5e:cc:93:c0:fc:26:65:34:8f:01:21:e0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gitlab.it.ilstu.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:06:d7:55:8d:6d:5e:cc:93:c0:fc:26:65:34:8f:01:21:e0
Serial Number (int): 263664780229618065832153257322420509942240
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c1:b1:0b:30:c9:23:0d:c8:2c:26:4b:06:ba:85:96:be:c9:af:21:37
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 80:30:42:18:a1:a7:c9:c4:47:13:74:59:78:f2:45:a9:09:f3:05:77
Fingerprint (sha256): 19:78:d9:76:b5:82:56:d5:19:9f:d5:2f:55:e7:81:1a:ca:5e:88:ab:69:72:41:f2:f4:c2:95:f1:0f:f9:c1:e2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gitlab.it.ilstu.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gitlab.it.ilstu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gitlab.it.ilstu.edu

Other certificates including the domain name ilstu.edu

(limited to 100 certificates)
owa.ilstu.edu
frodo.che.ilstu.edu
webdemo.ilstu.edu
login.it.ilstu.edu
scalefundercert.net
owa.illinoisstate.edu
parkingeb.illinoisstate.edu
webvpn.ilstu.edu
atvelocity01.ad.ilstu.edu
cacti.tel.ilstu.edu
ilstucmgtest.ilstu.edu
www5.cob.ilstu.edu
homer.lib.ilstu.edu
sharepoint-test.illinoisstate.edu
help.illinoisstate.edu
vidette.veridiansoftware.com
www.hr.ilstu.edu
ilstu.edu
homer.lib.ilstu.edu
stories.illinoisstate.edu
www.onapp.ilstu.edu
www.mktvideo.ilstu.edu
ltmonitor.itk.ilstu.edu
wdia-accounts.ilstu.edu
provisionserver.ilstu.edu
www.offcampushousing.ilstu.edu
owa.illinoisstate.edu
www.icampus.ilstu.edu
aiscampus-dev.ais.ilstu.edu
nsdev.ilstu.edu
ha.peopleadmin.com
www.uclub.ilstu.edu
lilt.ilstu.edu
www.seven.ilstu.edu
awsutm-test.ilstu.edu
atexpc.ilstu.edu
scalefundercert.net
support.cast.ilstu.edu
www.jobs.ilstu.edu
ulid.ilstu.edu
*.iwss.ilstu.edu
stash.it.ilstu.edu
owa-test.illinoisstate.edu
account-test.illinoisstate.edu
gartner.ilstu.edu
www.hr.ilstu.edu
gitlab.it.ilstu.edu
www.ts.ilstu.edu
gitlab.it.ilstu.edu
scalefundercert.net
www5.cob.ilstu.edu
uhigh.illinoisstate.edu
labstats.ilstu.edu
atlansweep01-t.adtest.ilstu.edu
scalefundercert.net
homer.lib.ilstu.edu
ilstu.edu
www.mlb.ilstu.edu
external-domains.ilstu.edu
www.jobs.ilstu.edu
redbirdmail.ilstu.edu
docs.ilstu.edu
*.ilstu.edu
scalefundercert.net
external-domains.ilstu.edu
students.cob.ilstu.edu
atinsightcon01-t.at.illinoisstate.edu
mallard.phy.ilstu.edu
aiscampus-dev.ais.ilstu.edu
parkingeb.illinoisstate.edu
wgltradio.ilstu.edu
www.saoweb.ilstu.edu
support.cast.ilstu.edu
gitlab.it.ilstu.edu
listserv.ilstu.edu
pgnetdev.sys.ilstu.edu
gartner.ilstu.edu
ha.peopleadmin.com
www.cas.ilstu.edu
watchmen.tel.ilstu.edu
listserv.ilstu.edu
nsdev.ilstu.edu
jh152command.ilstu.edu
splunkweb.ilstu.edu
stash.it.ilstu.edu
vidette.veridiansoftware.com
www.advance.ilstu.edu
office.lilt.ilstu.edu
gitlab.it.ilstu.edu
webtma.ilstu.edu
offcampushousing.illinoisstate.edu
account-test.illinoisstate.edu
libre.ilstu.edu
gitlab.it.ilstu.edu
updvpn.ilstu.edu
login.it.ilstu.edu
account.illinoisstate.edu
webtma-test.ilstu.edu
webtrac.ilstu.edu
external-domains.ilstu.edu

Certificate

The complete raw certificate details for gitlab.it.ilstu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgISAwbXVY1tXsyTwPwmZTSPASHgMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MzAyMzM2MjBaFw0x
OTEyMjkyMzM2MjBaMB4xHDAaBgNVBAMTE2dpdGxhYi5pdC5pbHN0dS5lZHUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZdw22HdkR8elw5ca+6fpWN9oM
yE019itvq4ygCLcDgm7f5uRybgbRLayLfnk1VuIb1HNYOPEqlZ3FjJAZgLjNJcVt
Xcfa1RGvdax+RMARGN61RYqEYti1tBRbCVc6zMvRMn237X11uGF7aYVWGSVbsOyr
4P+Up2RpBrAyCBIfqmh7lcBUMy5D9iz3/hP9o7QredFYVsR9vji+uCv7JF8NVF0F
kz9vsZUE3b7xF2u7G8RhsBiQAkQ3aPHaJtXdkBVJ/D4eFWUhyXqsa6po6/lj3TIX
Gq5yrWKtv694TXCdpC5XmyQb8A4zT/yEBANQ/ufeDGGCYLHmOS6wzNCKuX0nAgMB
AAGjggJpMIICZTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFMGxCzDJIw3ILCZLBrqF
lr7JryE3MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUF
BwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNy
eXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy
eXB0Lm9yZy8wHgYDVR0RBBcwFYITZ2l0bGFiLml0Lmlsc3R1LmVkdTBMBgNVHSAE
RTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRw
Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2
AOJpS64m6OlACeiGG7Y7g9Q+5/50iPukjyiTAZ3d8dv+AAABbYS/H98AAAQDAEcw
RQIgNot8PgitQklCV78kdBhYp3ltLMHt0zwW4kDHnT5+/3ACIQDz6EeSOat1BJtq
/P/1hCYA9kCobw8OFy25patOHl3xNQB3ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLc
pMMM9OVFR/R4AAABbYS/IcAAAAQDAEgwRgIhANyyDzOV8YopdkCOiSPUJBXfPuKC
HgGHdJW8bkhcbSwKAiEAhn6zhZMRUNy5FkDkuQPjseETNfFYxj+mR6RK4/5cDn0w
DQYJKoZIhvcNAQELBQADggEBAGgA+rbMEFxcv1gXozwn0O9Vd6hMIxqfpfyKac7m
PKtpF+ovcvUJGaAWwNlGiTZVGN5aBi3kR/FG0tnKOgfkamf0ZV5v0moVVH2x4Plb
E3yVIlpqbpNSyPmG5zDa/2NRb7XCLxtK081Nr4pQc+suorKulS+zbWD4VK7hRSLY
/1PbUTw5IzCzhiNE2bGhoQ7ffzkL9B3VTxEdUjex9fH1MGuX7rU2h3I9Zx/w5IKa
R7yyRxMRsrQr0oEwNCfyT3HwXr+wyyCt1t8lMOmL2AE38k4swAoKf8+zCgMqgJ9N
GBfhdK7+G6l7Dyw6xsUpCGlvWupo1c/HnsFBGDQVFNHX7HU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XcNth3ZEfHpcOXGvun6
VjfaDMhNNfYrb6uMoAi3A4Ju3+bkcm4G0S2si355NVbiG9RzWDjxKpWdxYyQGYC4
zSXFbV3H2tURr3WsfkTAERjetUWKhGLYtbQUWwlXOszL0TJ9t+19dbhhe2mFVhkl
W7Dsq+D/lKdkaQawMggSH6poe5XAVDMuQ/Ys9/4T/aO0K3nRWFbEfb44vrgr+yRf
DVRdBZM/b7GVBN2+8RdruxvEYbAYkAJEN2jx2ibV3ZAVSfw+HhVlIcl6rGuqaOv5
Y90yFxqucq1irb+veE1wnaQuV5skG/AOM0/8hAQDUP7n3gxhgmCx5jkusMzQirl9
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263664780229618065832153257322420509942240
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-30 23:36:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-29 23:36:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gitlab.it.ilstu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27452419676192611225547710179696824692726332520513419497230322833361391603700345021503337402386945580124135192227068458360798074279477294572798498631806272096562846838067857673291657719712112596001259983956070875071914820663518634603663710339631505208518234702555594587443186775987115132451195551002016759675148580166907927958123628861428921353736303801663860808614715851490954420655685349511183973664768418785732263836520612524708971801223423435145708871071873573887598644188136494410456307042270344353596576707471154683305980175080776414899537114741052146995828866288234350042961223592894429840565972041579567349031
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c1b10b30c9230dc82c264b06ba8596bec9af2137
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab.it.ilstu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d84bf1fdf00000403004730450220368b7c3e08ad42494257bf24741858a7796d2cc1edd33c16e240c79d3e7eff70022100f3e8479239ab75049b6afcfff5842600f640a86f0f0e172db9a5ab4e1e5df135007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d84bf21c00000040300483046022100dcb20f3395f18a2976408e8923d42415df3ee2821e01877495bc6e485c6d2c0a022100867eb385931150dcb91640e4b903e3b1e11335f158c63fa647a44ae3fe5c0e7d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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