downloads.chef.io

Issued by R3

About this certificate

This digital certificate with serial number 03:d7:b0:a6:d9:05:76:76:ba:53:61:bc:ff:0c:a3:64:2d:bb was issued on by Let's Encrypt.

With 34 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=downloads.chef.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d7:b0:a6:d9:05:76:76:ba:53:61:bc:ff:0c:a3:64:2d:bb
Serial Number (int): 334732377133534859128802370495520480439739
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: eb:cf:4b:ad:a3:2c:07:17:2b:e6:98:8d:46:78:b6:6d:dd:d3:f3:03
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d6:d9:12:e1:96:70:f1:45:2c:d9:33:6a:76:42:76:72:cc:fa:e5:30
Fingerprint (sha256): 20:2a:c1:96:f9:71:fe:bd:8e:1e:49:44:98:b2:ff:28:a2:be:6e:13:83:83:02:06:d3:e5:27:68:e7:7e:60:82

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate downloads.chef.io

34

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for downloads.chef.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arcade.progress.com
blogs.sitefinity.com
cart.ipswitch.com
darvin.ai
demo.sitefinity.com
demos.kendoui.com
downloads.chef.io
exchangeloadbalancer.com
flowmon.cz
forms.bravepoint.com
freeloadbalancer.cn
freeloadmaster.fr
ideas.kemp.ax
ideas.kemptechnologies.com
imailserver.com
ipswitchft.com
justdecompile.telerik.com
kempsdn.com
kemptechnologies.ru
ktdi.kemptechnologies.com
labs.kendoui.com
pages.kemptechnologies.com
partners.chef.io
resources.kinvey.com
skinsassemblybuilder.telerik.com
smartlogic.com
soluzioniprogress.it
themebuilder.kendoui.com
uniteux.telerik.com
www.exchangeloadbalancer.com
www.flowmon.cz
www.kempsdn.com
www.smartlogic.com
www.soluzioniprogress.it

Other certificates including the domain name chef.io

(limited to 100 certificates)
f4.shared.global.fastly.net
statuspage.io
5156937704407040-fe1.pantheonsite.io
dns-vetting1f.map.fastly.net
checkrstatus.com
g.ssl.fastly.net
f4.shared.global.fastly.net
dns-vetting1f.map.fastly.net
f4.shared.global.fastly.net
5156937704407040-fe1.pantheonsite.io
teststack.saas.chef.io
hello.chef.io
5156937704407040-fe1.pantheonsite.io
3down.mit.edu
3down.mit.edu
3down.mit.edu
statuspage.io
statuspage.io
g.ssl.fastly.net
statuspage.io
5156937704407040-fe1.pantheonsite.io
5156937704407040-fe1.pantheonsite.io
statuspage.io
5156937704407040-fe1.pantheonsite.io
3down.mit.edu
telemetry.es.chef.io
3down.mit.edu
f4.shared.global.fastly.net
f4.shared.global.fastly.net
f4.shared.global.fastly.net
5653164804014080-fe1.pantheonsite.io
statuspage.io
5653164804014080-fe1.pantheonsite.io
statuspage.io
dns-vetting1f.map.fastly.net
www.datadirect.com
dns-vetting1f.map.fastly.net
statuspage.io
5156937704407040-fe1.pantheonsite.io
statuspage.io
discourse.chef.io
5653164804014080-fe1.pantheonsite.io
3down.mit.edu
f4.shared.global.fastly.net
f4.shared.global.fastly.net
dns-vetting1f.map.fastly.net
5156937704407040-fe1.pantheonsite.io
statuspage.io
*.opscode.com
5156937704407040-fe1.pantheonsite.io
5156937704407040-fe1.pantheonsite.io
www.chefconf.chef.io
5156937704407040-fe1.pantheonsite.io
dns-vetting1f.map.fastly.net
kitchen.ci
5156937704407040-fe1.pantheonsite.io
id.learn.chef.io
f4.shared.global.fastly.net
statuspage.io
f4.shared.global.fastly.net
opscode.com
*.community.chef.io
5156937704407040-fe1.pantheonsite.io
3down.mit.edu
f4.shared.global.fastly.net
statuspage.io
statuspage.io
5653164804014080-fe1.pantheonsite.io
engage.empathways.org
statuspage.io
ebet.demo.chef.io
checkrstatus.com
dns-vetting1f.map.fastly.net
g.ssl.fastly.net
opscode.com
5156937704407040-fe1.pantheonsite.io
dns-vetting1f.map.fastly.net
f4.shared.global.fastly.net
dns-vetting1f.map.fastly.net
statuspage.io
checkrstatus.com
docs.chef.io
statuspage.io
statuspage.io
f4.shared.global.fastly.net
5653164804014080-fe1.pantheonsite.io
community-slack.chef.io
statuspage.io
3down.mit.edu
*.chef.io
3down.mit.edu
f4.shared.global.fastly.net
5653164804014080-fe1.pantheonsite.io
hello.chef.io
5156937704407040-fe1.pantheonsite.io
www.datadirect.com
statuspage.io
5653164804014080-fe1.pantheonsite.io
f4.shared.global.fastly.net
discourse.chef.io

Certificate

The complete raw certificate details for downloads.chef.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjkjO0fcYTN6nHonmA+j
nI931I65rhRmCKrAgltjjm2ulM52VctRo62ZGTNUuvH50MkImF2vV3AF4d72kpzj
2HFGuGoycZwiBI7LFMukG4g+wo3lIoZ1rvDlQSR9SKzqgd7pjdoU+H7Ob7v85WmD
5PXiqE5DNdtaZHXgErFdpIFZ7DcyonWMkRT+r+Wsjsh+KmpAvEs0PYbPBlfCin+9
J+etDHTk3Ars5KOft8LphliUD+O6nObh26dHrOswpnbnuA+lmPSEsLUd3MTsZKIR
2XnaRX7APD3jwjgsB2baMs+28B3TgxD1VvG47ModfBl35CPQvFWec0KW8gutY2Am
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334732377133534859128802370495520480439739
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-26 11:45:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-24 11:45:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'downloads.chef.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17954014917349886283460070089644814534999812753499856741290083720901150970319382547658572912219618863443293730795485303343106454231736485751532042672582363177839776459467803761927961969153696524824750529111258924076372501858126321693918419728465905841394233250177362316422646524419453817708517925864817244956579130412027320863916825639509697614942543512906235742554222542303307595255349265342546420726050773627624215652306397962627523604191928644675084932254462283616328831082432879343733633019296635362651832277918078611816201128930861862374536185262426444341984416925889049124723875729903618939375289331882137757301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ebcf4bada32c07172be6988d4678b66dddd3f303
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (714 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcade.progress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.sitefinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cart.ipswitch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darvin.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.sitefinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demos.kendoui.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloads.chef.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchangeloadbalancer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flowmon.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.bravepoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeloadbalancer.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeloadmaster.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideas.kemp.ax'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideas.kemptechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imailserver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipswitchft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justdecompile.telerik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kempsdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kemptechnologies.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ktdi.kemptechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labs.kendoui.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages.kemptechnologies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.chef.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.kinvey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skinsassemblybuilder.telerik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartlogic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soluzioniprogress.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themebuilder.kendoui.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uniteux.telerik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exchangeloadbalancer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flowmon.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kempsdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smartlogic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soluzioniprogress.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b6c04fb9000000403004730450220662228f5ba41884d0dd5f39b345906824f430866f3d041a90de78f4948e4c30d022100c800e43089b667d3880f209d715f51e1e5ae035f1b330cb61d4efa3f3ec2a63d00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b6c04fbef0000040300473045022073b6dcd2dcddcd83ac752266ffc9d3ff0a615d076154d5ae5a62110a2ce55163022100952019527c03ec0b10caf3f5ad09b47311d9a3d59ac8fdc8b3245c664e272898
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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