bus20.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:61:75:fd:01:72:5e:c0:be:17:a3:80:ab:94:40:2e:a8:d6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bus20.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:61:75:fd:01:72:5e:c0:be:17:a3:80:ab:94:40:2e:a8:d6
Serial Number (int): 381613366674327806743606764391715524487382
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f2:0e:ea:61:a0:b0:56:5b:c8:99:5b:60:5f:67:9b:36:dd:cb:74:c5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 25:56:fa:db:22:42:3a:b5:05:b4:ca:94:42:99:02:7a:8c:c0:d6:4e
Fingerprint (sha256): 23:88:c0:a3:0c:2b:51:f0:7c:bc:f7:35:08:26:2f:be:42:ef:be:44:30:55:f3:71:8e:da:d7:bb:da:ad:5e:9d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bus20.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bus20.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bus20.com

Other certificates including the domain name bus20.com

(limited to 100 certificates)
paradox.one
www.makingpositivewaves.com
www.depreciacioncarros.com.co
mydearestlovefriend.com
auth.account.bleumi.com
pisosrentables.com
www.kaminosoft.info
joeytermeulen.com
www.nikafoundation.com
kartupokemon.id
bus20.com
primerelocation.demo.movello.se
bus20.com
www.makingpositivewaves.com
studentcare.morningstar.org.sg
alexindia.in
ayaos.work
one-beta.ultroncloud.com
www.mala-educacion.com
evo.stm.brooboox.com
towatchapp.com
www.presstamfg.com
petrack.co
app.cloudstickiez.com
abelmoremi.com
tosashimizu.bus20.com
ayaos.work
www.taporty.it
hicreche.com
www.sezerbudak.dev
upollo.ai
jobii.be
www.aurypup.com
abelmoremi.com
www.depreciacioncarros.com.co
www.nikafoundation.com
www.grood.app
kartupokemon.id
geniusacademy.one
florianklein.me
www.mevsimdeyemek.com
gog.auction
auth.account.bleumi.com
www.logicasana.com
mydearestlovefriend.com
geniusacademy.one
www.crawlspacespro.com
newsletters.net.au
bus20.com
patelvandan.com
tylermc.me
www.auriopho.com
bus20.com
www.grood.app
evo.stm.brooboox.com
www.auriopho.com
app-hs.newslit.co
www.maxlair.com
www.atavihomestay.com
app.soulbuddy.com
bus20.com
www.empathystone.com
dailysprint.app
admin.stage.doc.cr
bus20.com
sls-qa.mobilenxt.app
familiestatuut.koenenenco.nl
www.denvy.co
www.denvy.co
www.journeytodev.com
www.mala-educacion.com

Certificate

The complete raw certificate details for bus20.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG/DCCBeSgAwIBAgISBGF1/QFyXsC+F6OAq5RALqjWMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEwMzEwOTI3NTZaFw0x
OTAxMjkwOTI3NTZaMBQxEjAQBgNVBAMTCWJ1czIwLmNvbTCCAiIwDQYJKoZIhvcN
AQEBBQADggIPADCCAgoCggIBAL+qgcMrTLJM4MTIy2Tv5xJ4v36lk30aYIYnFiOz
e3QPRzI2bfUbp+cRLq8Ix6HkmIGsPhjQf+uTk1P9QG38CuFOykRvCOQYagcDy1fZ
W2WSOQbp1LD5dmO5vcj+Se6vuzh0/TkpvTYIRm4JHzc+4feif0vShLQj499v5krm
Rasvp1H1wiA3DWZoOhO51ehgNgoEpXEcSOBDDULtcf7W0SK5KfxCYEl4XVvzzm2V
DOWlcbr+uBfnB+RMIQsWLRsKDKlulLnRbVFi6J9HIBTun5jNQLkHg0zdiJbpl/Mz
LbTFQHZhKAd7D5uaIfDKP6FRqXviJMS2lTI/FaEOenqHnajKo3zl98T9C1CZyRrj
PeaAW08SxTWPZdfxuCXyWsYitMQuhxB3H5aTkHEJW7ffRMyxd8FbDCtm/NTnlmPd
JTY4eySP9cAyh8QBOxCQHJ8V0FH0SxGMOOvkDoyhYK7tjNYfoVRR43PCTtNBoEyW
Im+T5ZyOIgZm8bssC9HZj85vmBYUIhatR3fNfB1RhKYxZ+sPjkk9oI0Tk/NgWh9l
K8IjXzco2GaA5rplQxW/xVkKObbiJgK/1v4s2WJ/zC8OW8uFbZr7i9veapw3tPqn
ZT8KuUUrRkH/Zt8TeryHO+54nkQzsBGNc9D8vjCKiPNoB3d0qOQ6m4T/gUlZDoX4
Ru/PAgMBAAGjggMQMIIDDDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFPIO6mGgsFZb
yJlbYF9nmzbdy3TFMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G
CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZy8wFAYDVR0RBA0wC4IJYnVzMjAuY29tMIH+BgNVHSAEgfYw
gfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0
cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBD
ZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBh
cnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0
ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3Np
dG9yeS8wggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgApPFGWVMg5ZbqqUPxYB9S3
b79Yeily3KTDDPTlRUf0eAAAAWbJql0tAAAEAwBHMEUCIGvZ7v4JThdt4QC7TT3/
gMy/keF/qrB/+9C2QikM0wmeAiEA+ebpQ0BND+NboKNHyph/Mujsc95AFbKABnh3
3NDvKL0AdQBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWbJql0s
AAAEAwBGMEQCIGPUawZqtha9nhP/lg0TT4E9IihrgGz5/S2JOhdavyi9AiAQfzQm
56/hYOg+hGh432dytpPvlmR0F1805YnAyUFPPzANBgkqhkiG9w0BAQsFAAOCAQEA
Jz/UF83hlZAkPcHWQhge+yvVTM3t7kI0RGHCBCg9ToPBTKnCKm4Hy3kgqG5Er+ai
F56pbPJkZGgAZSGgogHAs6HcIma0CySAMMh15STLhFfVNllIbGWhYgp8rzG0mn8p
s497+JyEtG2bpff8hTaem3IXjmWdoKcleH19xHaHaXjzrGApUYwyiZtUw+Wz+mKr
TykW2otbx1qCJ+5CceHehIH3t6rsvbmjZ8CCeeWOdb0bBQLy0Ay9dWh0omMpi0xF
qIs2Rl/G/Y+cD8dy+vn9EM5MarYmlLH6+77cYwDaV1z56rB+RhgWYmohtl+k8Wqh
phlhPkj6hbGvgVVD+6OD/Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 381613366674327806743606764391715524487382
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-31 09:27:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-29 09:27:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bus20.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 781929233394459744269675172559648669229243784700577608376395155486284098158594865852124449636877176679401404591673868936148810858864689600916274954478889546964569707397775026519593565013654012685944994241338467781461255066044285967224152472105231596635002408371849601171788407080808376378697477618316149517912329530869105777368924915070268375114121738097901900370954495768281200852781989368755279760854793087363920990958799633524844869363616551326789013063039733252187773356556490514277288544308560714605805859019008596322501433017296901925887221608166644554249040878970547442035571531949823447314009591520690701811736367634404281466095858921737018898419229241547136170524998585285251157628329981630445469567017771402886555392564698243653811181139348809284211453013233782191506525435232871429765055164341248903829244885837535301578562707470297190644937009993371437832971400948439639862030016858895576349248554018533898083512745641192693880101277625146474002024499656354309056998685803677428537829361785389281257715020207667824299568442088037720582533463179603258425902633631463389536166252931041082113605742525293693049324881914690392024186135243359957254873916930984784112979932037800244253901328420338270273924692028328230221443023
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f20eea61a0b0565bc8995b605f679b36ddcb74c5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bus20.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166c9aa5d2d000004030047304502206bd9eefe094e176de100bb4d3dff80ccbf91e17faab07ffbd0b642290cd3099e022100f9e6e943404d0fe35ba0a347ca987f32e8ec73de4015b280067877dcd0ef28bd0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000166c9aa5d2c0000040300463044022063d46b066ab616bd9e13ff960d134f813d22286b806cf9fd2d893a175abf28bd0220107f3426e7afe160e83e846878df6772b693ef966474175f34e589c0c9414f3f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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