listarchives.documentfoundation.org

Issued by R3

About this certificate

This digital certificate with serial number 03:a2:7b:07:9a:ca:47:60:a6:e0:23:e2:ca:8e:ea:8f:86:cc was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=listarchives.documentfoundation.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a2:7b:07:9a:ca:47:60:a6:e0:23:e2:ca:8e:ea:8f:86:cc
Serial Number (int): 316626135765549583487961085560209309402828
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 71:d3:2e:35:ec:ce:e0:7f:0c:bc:fe:7d:33:98:e7:32:ee:a7:49:0b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 29:d9:d1:e9:11:6c:7e:d6:d5:90:f0:62:b2:54:3c:dc:83:12:9f:47
Fingerprint (sha256): 26:26:f9:12:0d:ec:86:4a:30:0f:a4:81:14:6f:ed:5f:e4:7a:bd:08:67:43:0e:ca:39:ba:09:57:b2:29:65:a6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate listarchives.documentfoundation.org

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for listarchives.documentfoundation.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

listarchives.documentfoundation.org
listarchives.documentliberation.org
listarchives.libreoffice.org
listarchives.odftoolkit.org
listarchives.tdf.io

Other certificates including the domain name documentfoundation.org

(limited to 100 certificates)
imageboard.documentfoundation.org
bugs.documentfoundation.org
bugs.documentfoundation.org
survey.documentfoundation.org
documentfoundation.org
documentfoundation.org
survey.documentfoundation.org
irc.documentfoundation.org
planet.documentfoundation.org
listarchives.documentfoundation.org
vm222.documentfoundation.org
infratools.documentfoundation.org
irc.documentfoundation.org
translations.documentfoundation.org
monitoring.documentfoundation.org
infratools.documentfoundation.org
pootle.documentfoundation.org
monitoring.documentfoundation.org
pad.documentfoundation.org
translations.documentfoundation.org
dashboard.documentfoundation.org
imageboard.documentfoundation.org
redmine.documentfoundation.org
listarchives.documentfoundation.org
translations.documentfoundation.org
intranet.documentfoundation.org
documentfoundation.org
stats.documentfoundation.org
blog.documentfoundation.org
status.documentfoundation.org
survey.documentfoundation.org
irc.documentfoundation.org
vm178.documentfoundation.org
auth.documentfoundation.org
stats.documentfoundation.org
translations.documentfoundation.org
bugs.documentfoundation.org
lists.documentfoundation.org
jitsi.documentfoundation.org
wiki.documentfoundation.org
translations.documentfoundation.org
wiki.documentfoundation.org
dashboard.documentfoundation.org
irc.documentfoundation.org
downloadarchive.documentfoundation.org
survey.documentfoundation.org
auth.documentfoundation.org
nextcloud.documentfoundation.org
blog.documentfoundation.org
download.documentfoundation.org
bugs.documentfoundation.org
redmine.documentfoundation.org
elections.documentfoundation.org
wiki.documentfoundation.org
download.documentfoundation.org
pumbaa.documentfoundation.org
planet.documentfoundation.org
monitoring.documentfoundation.org
listarchives.documentfoundation.org
stats.documentfoundation.org
imageboard.documentfoundation.org
translations.documentfoundation.org
planet.documentfoundation.org
pad.documentfoundation.org
blog.documentfoundation.org
listarchives.documentfoundation.org
bugs.documentfoundation.org
nextcloud.documentfoundation.org
blog.documentfoundation.org
survey.documentfoundation.org
piwik.documentfoundation.org
wiki.documentfoundation.org
vm222.documentfoundation.org
intranet.documentfoundation.org
stats.documentfoundation.org
documentfoundation.org
survey.documentfoundation.org
stats.documentfoundation.org
translations.documentfoundation.org
irc.documentfoundation.org
listarchives.documentfoundation.org
translations.documentfoundation.org
gerrit-stage.documentfoundation.org
extensions.libreoffice.org
download.documentfoundation.org
piwik.documentfoundation.org
imageboard.documentfoundation.org
blog.documentfoundation.org
gerrit-stage.documentfoundation.org
bugs.documentfoundation.org
wiki.documentfoundation.org
piwik.documentfoundation.org
translations.documentfoundation.org
pad.documentfoundation.org
auth.documentfoundation.org
listarchives.documentfoundation.org
vm222.documentfoundation.org
listarchives.documentfoundation.org
bugzilla-test.documentfoundation.org
bugs.documentfoundation.org

Certificate

The complete raw certificate details for listarchives.documentfoundation.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGxTCCBa2gAwIBAgISA6J7B5rKR2Cm4CPiyo7qj4bMMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzAyMjgwMjA3MjFaFw0yMzA1MjkwMjA3MjBaMC4xLDAqBgNVBAMT
I2xpc3RhcmNoaXZlcy5kb2N1bWVudGZvdW5kYXRpb24ub3JnMIICIjANBgkqhkiG
9w0BAQEFAAOCAg8AMIICCgKCAgEApMZBtXYfMdSgM3V1cYmCBodNqLSr+m6PwtDG
xB6R0giIWLBFl3L4yawTlbQpm8iL1JU8iljGRnhvmrUTSJ+5pjOcImeHkrfDHugm
yYZ5qmW6VcODUsC0LCWjs//FVahsEFaoenQhxLcxlLd6ikzMFJzPeIUzldXCmo9/
3govMREwmDgyprjQeKR2ND9XPbz6g6p2/axLv8JHlpd/bAAexK4lRdw+u/8u/BCt
RJo4+Bsw7xye0GBTAkAAdsWG4TdRVCTmU6jwFw9Ykbv1gzBG81/orQk5sIpDyCIy
tZq4M7M5A3LaE2jBKDiD/qBWbkTIjreh4nPcjJK2dRMyb47iklzGSilpN18TI84d
HsDEJTTqTwMXE5PoL5IJB15+P+rVp2ZIoo5Telz4NaXK3KiiyqbE4iZF8oPqRbJO
Y93jK4moNuaiPfW63hYmtAW1ER4OaXtqAmxbbqCKOfm4AyqUd7CWDN3306epevD8
/2/JttjNEkeIXbTrpnS6vHuVjJg9NoHdHIOEmQzlpywgQdxA+cbyGZufA5BZrskH
axJuwzFusuR5++b2HM0661mhxNRe0uyOxuD7AGH2E44Tjgm4tKYLbepDEwKnTyOC
SqjtBUBNgpXGlRXSpTFnHjKSLBRgNOlc1exckDm2f2a2ieezJG1HudZKwBH2bTr/
n8I3+k8CAwEAAaOCAtcwggLTMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUcdMuNezO
4H8MvP59M5jnMu6nSQswHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYw
VQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5v
cmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wgaUGA1UdEQSB
nTCBmoIjbGlzdGFyY2hpdmVzLmRvY3VtZW50Zm91bmRhdGlvbi5vcmeCI2xpc3Rh
cmNoaXZlcy5kb2N1bWVudGxpYmVyYXRpb24ub3JnghxsaXN0YXJjaGl2ZXMubGli
cmVvZmZpY2Uub3JnghtsaXN0YXJjaGl2ZXMub2RmdG9vbGtpdC5vcmeCE2xpc3Rh
cmNoaXZlcy50ZGYuaW8wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB
AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEF
BgorBgEEAdZ5AgQCBIH2BIHzAPEAdwB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9Ir
wTpXo1LrUgAAAYaV/SmnAAAEAwBIMEYCIQD3e6czab8BzhJ1dKSF+1eNUWUjO9+r
2MtoH8jOx87QuAIhANctKrANny8FOXvQR1drYVUIbzSlpOz3emfeUz+bN+wqAHYA
rfe++nz/EMiLnT2cHj4YarRnKV3PsQwkyoWGNOvcgooAAAGGlf0p1QAABAMARzBF
AiAn4SI8hyzTuCy7aqPpOzo7W0DEY+/v/+jhYuD0zjoNPQIhAKxAraHiWjGKds/B
XCAMo9RgHGNK4ugB5B+Jjp9SolAiMA0GCSqGSIb3DQEBCwUAA4IBAQADyzLvocqu
W49dyp+76vEuHUHZuj+Ad/lTMb/f6WbxlWxPgkDBKSlXJ9YeqX0RCwjverIjwR9p
KN7RknHd7oergwmfXPKlBEsdeUZlpuEML6lOGttqWDahHVlieyMUNTdKbMw+mOml
3Lyn8yOf2e8xiUGp2o1Z0cEHg35wXDMmvOUH7hviMCN/bzCWRfjgC3D1Y+dPObiu
mxENx8bXdeEN7w/Ch/aqvlCp/IOYZ6IZDVYVBlS88DUcHVA/W2G2DWwo65SfDRr5
7GlQppVNBCzxpgpGAOqom2dr5VG3wzhX8EGs1wrcZ7Uo3iVbjUuhVDuDxM8CioPW
hKGPn8CsQdFh
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316626135765549583487961085560209309402828
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-28 02:07:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-29 02:07:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'listarchives.documentfoundation.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 672221067267196675423641940660142817436814591131841091733508040067353052615315784920602308573772310453357108176380234262355459482785588238814481156504500050367038851824613875912123877322496664765350863362929814441724425699791285132550076742149644872387748733002852527623333877033506217343731580873485474067192760961394226052855571588321172696451507140005563141083942130680377880095386349567407413049293162933552118904654236472174587659641995781041520398657884372292173856986563474123081428951628197095037926223622887993718427234966025696779174472253656563367136940164494899595494140465748342538976330770209668886175562763663649338266015005910994678787100712043442435731602705839023957317477969381653544974666461040334247599551299790078610525660796508257450756712006643210951687690753432709454535088605138769881603338764307516783615731118346303230966145481031918703141122600718713778625491851291250146465610226529463842526412198983368342627410896425163719757131127216099675093888715014432783447905783965333672840023626682983236209243761356945716845760704700524863856859347535356514724748657209037691899956603239454923662303549308817625888566179318002326292715927699752893306382362959950798150257264828835775251160236515700160731806287
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							71d32e35eccee07f0cbcfe7d3398e732eea7490b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listarchives.documentfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listarchives.documentliberation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listarchives.libreoffice.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listarchives.odftoolkit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listarchives.tdf.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018695fd29a70000040300483046022100f77ba73369bf01ce127574a485fb578d5165233bdfabd8cb681fc8cec7ced0b8022100d72d2ab00d9f2f05397bd047576b6155086f34a5a4ecf77a67de533f9b37ec2a007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018695fd29d50000040300473045022027e1223c872cd3b82cbb6aa3e93b3a3b5b40c463efefffe8e162e0f4ce3a0d3d022100ac40ada1e25a318a76cfc15c200ca3d4601c634ae2e801e41f898e9f52a25022
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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