*.test.k8s.centrio.com

Issued by R3

About this certificate

This digital certificate with serial number 04:14:82:3f:a2:38:20:e7:65:24:e4:bd:28:91:52:6c:d4:e1 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.test.k8s.centrio.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:14:82:3f:a2:38:20:e7:65:24:e4:bd:28:91:52:6c:d4:e1
Serial Number (int): 355427921109811198765568788035406492652769
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f0:55:ca:1a:14:2e:9f:ef:7c:1f:b4:4a:56:06:ac:58:87:6e:e3:14
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9d:03:d4:bd:42:34:6c:fd:5f:08:af:04:fa:b7:4f:74:5f:8c:b0:42
Fingerprint (sha256): 1e:80:a1:1d:a6:e8:e8:5e:51:c0:81:cb:6a:e5:cb:8a:c6:31:bd:9f:67:75:a9:64:28:fa:80:db:5f:54:3d:9b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.test.k8s.centrio.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.test.k8s.centrio.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.k8s.sandbox.us-east-1.centrio.com
*.k8s.sandbox.us-west-2.centrio.com
*.k8s.test.us-east-1.centrio.com
*.k8s.test.us-west-2.centrio.com
*.sandbox.blendlabs.com
*.sandbox.centrio.com
*.sandbox.us-east-1.blendlabs.com
*.sandbox.us-east-1.centrio.com
*.sandbox.us-west-2.blendlabs.com
*.sandbox.us-west-2.centrio.com
*.test-mirror.k8s.centrio.com
*.test.k8s.centrio.com
*.test.us-east-1.centrio.com
*.test.us-west-2.centrio.com
sandbox.blendlabs.com
sandbox.centrio.com
sandbox.us-east-1.blendlabs.com
sandbox.us-east-1.centrio.com
sandbox.us-west-2.blendlabs.com
sandbox.us-west-2.centrio.com
test-mirror.k8s.centrio.com
test.k8s.centrio.com
test.us-east-1.centrio.com
test.us-west-2.centrio.com

Other certificates including the domain name centrio.com

(limited to 100 certificates)
paultest.sandbox.centrio.com
*.sandbox.centrio.com
paultest.sandbox.centrio.com
faye.sandbox.centrio.com
*.istio.test.k8s.centrio.com
vpn2.centrio.com
*.sandbox.k8s.centrio.com
paultest1.sandbox.centrio.com
prometheus.test.k8s.centrio.com
radius.sandbox.centrio.com
proxy.sandbox.centrio.com
www.centrio.com
*.istio.sandbox.k8s.centrio.com
pong.centrio.com
prometheus.test.k8s.centrio.com
certmanager.sandbox.centrio.com
cert-test.sandbox.centrio.com
*.sandbox.k8s.centrio.com
*.sandbox.k8s.centrio.com
centrio.com
*.top.k8s.centrio.com
*.sandbox.centrio.com
*.sandbox.centrio.com
cartography.sandbox.centrio.com
smartsafe.sandbox.centrio.com
*.test-us-east-1.k8s.us-east-1.centrio.com
*.k8s.sandbox.us-east-1.centrio.com
*.test.k8s.centrio.com
*.sandbox.k8s.centrio.com
www.centrio.com
*.sandbox.centrio.com
*.chinmaya.k8s.centrio.com
*.test.k8s.centrio.com
*.test-us-east-1.k8s.us-east-1.centrio.com
certmanager.sandbox.centrio.com
paultest.sandbox.centrio.com
www.centrio.com
*.istio.sandbox-tenants.k8s.centrio.com
*.test-us-east-1.k8s.us-east-1.centrio.com
prometheus.chinmaya.k8s.centrio.com
*.k8s.sandbox.centrio.com
proxy.sandbox.centrio.com
*.sandbox-tenants.k8s.centrio.com
paultest1.sandbox.centrio.com
certmanager.sandbox.centrio.com
*.test-us-west-2.k8s.us-west-2.centrio.com
www.centrio.com
mulesoft-byte-dev.sandbox.centrio.com
*.sandbox.centrio.com
culture-board.app-container.vpn.centrio.com
*.sandbox.k8s.centrio.com
vault-infrastructure.test.us-west-2.centrio.com
*.sandbox.k8s.centrio.com
*.top.k8s.centrio.com
*.test.k8s.centrio.com
vision.sandbox.centrio.com
*.mt.k8s.centrio.com
*.sandbox.centrio.com
centrio.com
grafana.sandbox.k8s.centrio.com
*.test.k8s.centrio.com
centrio.com
www.centrio.com
paultest.sandbox.centrio.com
faye.sandbox.centrio.com
*.sandbox.k8s.centrio.com
test.chan.k8s.centrio.com
paultest1.sandbox.centrio.com
*.sandbox.k8s.centrio.com
prometheus.sandbox.k8s.centrio.com
mulesoft-byte-dev.sandbox.centrio.com
www.centrio.com
proxy.sandbox.centrio.com
pdfkit.sandbox.k8s.centrio.com
*.sandbox.centrio.com
centrio.com
tinode.co
prometheus.chinmaya.k8s.centrio.com
grafana.top.k8s.centrio.com
prometheus.test.k8s.centrio.com
prometheus.top.k8s.centrio.com
*.test.k8s.centrio.com
proxy.sandbox.centrio.com
paultest1.sandbox.centrio.com
*.sandbox.centrio.com
pong.centrio.com
paultest1.sandbox.centrio.com
*.istio.test.k8s.centrio.com
*.istio.sandbox-tenants.k8s.centrio.com
*.sandbox.k8s.centrio.com
smartsafe.sandbox.centrio.com
*.test-us-east-1.k8s.us-east-1.centrio.com
paultest.sandbox.centrio.com
gse-api.sandbox.k8s.centrio.com
*.istio.sandbox-tenants.k8s.centrio.com
paultest1.sandbox.centrio.com
*.sandbox.k8s.centrio.com
blahblahblah.sandbox.centrio.com
sandbox.k8s.centrio.com
paultest1.sandbox.centrio.com

Certificate

The complete raw certificate details for *.test.k8s.centrio.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuJXYo/XyG2+kRJXwXiu
wOCR+PaPqheLiSJA1nSrHo7wE/5JdKeG1gelIYLDriqX3wgksFs/Rsx0UEWtSzkQ
gdGOSVkLUhlu1bBsgvTjpA4GyUJ2Jk2QDOv9J5vOWI2cC0v1rHdrv9oSGtf/L4py
+22X91C1cj6Hl17fNe9njoZyGCZm6r6hTwsiMdCnBR1/LRQBXFjbJcFrym6SL5Uq
aEkyBlFhB4MeHNanAWAYBFBmn0aprGyHGlqCtzG4CnqjuQGT7IhX8XrNmOa39Wci
xPS4H0ih5EciuOSXLC/qa+47FhT1RNb1owEroAarc3Ri87V1G4IDqemR3/t/RyUe
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 355427921109811198765568788035406492652769
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-11 01:14:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-11 01:14:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.test.k8s.centrio.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26116703901427966533005481376752301183501886862270323171715806027316041305344156291733113319089064493397882032289501386314395479946429211962557164656472877671455832095461606252684619909891188659056544122763017524612944298635101048164586565087111962510220721678731660629176694845502735669543562169210013284072025241882416175739284460922514503314896588188482503919447646989333434778981420678381852342313151740786145384383187635940333266111591815836819563267332985089576777753432705866917539831400633020869278702678160296618164100507716390166727131491477893365047743939004279387544518509936812424345472484748404793351733
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f055ca1a142e9fef7c1fb44a5606ac58876ee314
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (724 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.k8s.sandbox.us-east-1.centrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.k8s.sandbox.us-west-2.centrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.k8s.test.us-east-1.centrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.k8s.test.us-west-2.centrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandbox.blendlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandbox.centrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandbox.us-east-1.blendlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandbox.us-east-1.centrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandbox.us-west-2.blendlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandbox.us-west-2.centrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test-mirror.k8s.centrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.k8s.centrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.us-east-1.centrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.us-west-2.centrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.blendlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.centrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.us-east-1.blendlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.us-east-1.centrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.us-west-2.blendlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.us-west-2.centrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-mirror.k8s.centrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.k8s.centrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.us-east-1.centrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.us-west-2.centrio.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017e46ea10c7000004030046304402204e29fc6a6535d76b0b4e856288068513b6b4a0759c4da89dc8700834699825c902207f7ca53cf2db182091a530d1a5d672ee0dc73f3c951e39e5a8d59503948552aa00760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017e46ea10f4000004030047304502202117f3a2392d509905c7938bf94e46555324e8c208a24cce8196ca477b0307ea022100a6e0c259b9b7e84cd411730c208ade1fa50a16c8a231a14309cdac70bd610607
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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