lookbook.gloria-jeans.ru

Issued by R3

About this certificate

This digital certificate with serial number 03:d7:d6:dd:a8:d7:2e:e9:40:ab:cd:00:a3:92:34:43:b8:49 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lookbook.gloria-jeans.ru

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d7:d6:dd:a8:d7:2e:e9:40:ab:cd:00:a3:92:34:43:b8:49
Serial Number (int): 334783172396479604427820395070413854718025
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 38:06:d0:df:6a:09:35:be:c4:ed:eb:84:db:81:23:7c:72:c5:30:92
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ac:31:b9:dd:8c:b6:db:3d:80:a5:fb:29:f7:68:6f:0b:54:ff:85:8a
Fingerprint (sha256): 29:12:eb:1d:db:ee:0e:f1:ad:c4:01:2d:62:ee:c6:56:86:eb:94:86:9c:6b:e5:c5:54:9c:df:5f:4c:96:cf:97

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lookbook.gloria-jeans.ru

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lookbook.gloria-jeans.ru

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lookbook.gloria-jeans.ru
www.lookbook.gloria-jeans.ru

Other certificates including the domain name gloria-jeans.ru

(limited to 100 certificates)
omg.gloria-jeans.ru
mail2.gloria-jeans.ru
cc-main-master.preprod.gloria-jeans.ru
pim-master.gs.gloria-jeans.ru
lookbook.gloria-jeans.ru
*.gloria-jeans.ru
admin-auth-master.preprod.gloria-jeans.ru
bu-master.gs.gloria-jeans.ru
lookbook.gloria-jeans.ru
lookbook.gloria-jeans.ru
omg.gloria-jeans.ru
test.oms.gloria-jeans.ru
api-test.oms.gloria-jeans.ru
logs.new.gloria-jeans.ru
*.gloria-jeans.ru
storage-cdn3.gloria-jeans.ru
feed-master.preprod.gloria-jeans.ru
sccm.gloria-jeans.ru
admin-gui-frontend-preprod-test.preprod.gloria-jeans.ru
lookbook.gloria-jeans.ru
gloria-jeans.ru
pim-dev.gs.gloria-jeans.ru
admin-gui-backend-master.gs.gloria-jeans.ru
jenkins.gs.gloria-jeans.ru
customer-gui-asm-master.preprod.gloria-jeans.ru
clicks.gloria-jeans.ru
front-stage.preprod.gloria-jeans.ru
kibana.new.gloria-jeans.ru
omg.gloria-jeans.ru
audit-master.preprod.gloria-jeans.ru
storage-cdn3.gloria-jeans.ru
clicks.gloria-jeans.ru
blog.gloria-jeans.ru
eoiqpm.gloria-jeans.ru
customers-master.preprod.gloria-jeans.ru
jenkins.oms.gloria-jeans.ru
help.gloria-jeans.ru
help.gloria-jeans.ru
api.outfit.gloria-jeans.ru
gloria-jeans.ru
omg.gloria-jeans.ru
sccm.gloria-jeans.ru
eoiqpm.gloria-jeans.ru
blog.gloria-jeans.ru
clicks.gloria-jeans.ru
admin-gui-backend-master.preprod.gloria-jeans.ru
es-public.gs.gloria-jeans.ru
offers-dev.gs.gloria-jeans.ru
omg.gloria-jeans.ru
cms-master.preprod.gloria-jeans.ru
clicks.gloria-jeans.ru
integration-oms.preprod.gloria-jeans.ru
cdn-adapter-task-97154.preprod.gloria-jeans.ru
clicks.gloria-jeans.ru
admin-gui-backend-master.preprod.gloria-jeans.ru
admin-gui-frontend-master.preprod.gloria-jeans.ru
lookbook.gloria-jeans.ru
help.gloria-jeans.ru
lookbook.gloria-jeans.ru
logs.new.gloria-jeans.ru
info.gloria-jeans.ru
front-test.front.gloria-jeans.ru
lookbook.gloria-jeans.ru
omg.gloria-jeans.ru
info.gloria-jeans.ru
front-test.front.gloria-jeans.ru
camunda-test.oms.gloria-jeans.ru
eoiqpm.gloria-jeans.ru
cc-main-master.gs.gloria-jeans.ru
offers-feature.gs.gloria-jeans.ru
storage-cdn2.gloria-jeans.ru
clicks.gloria-jeans.ru
ensi-connector-master.preprod.gloria-jeans.ru
webapi-connector-task-97154.preprod.gloria-jeans.ru
*.gloria-jeans.ru
customer-gui-mob-master.gs.gloria-jeans.ru
lookbook.gloria-jeans.ru
cc-main-master.preprod.gloria-jeans.ru
*.gloria-jeans.ru
storage-cdn6.gloria-jeans.ru
integration-oms.preprod.gloria-jeans.ru
front-test.front.gloria-jeans.ru
1mln.gloria-jeans.ru
info.gloria-jeans.ru
blog.gloria-jeans.ru
pim-master.preprod.gloria-jeans.ru
es-public.preprod.gloria-jeans.ru
admin-gui-frontend-preprod-test.preprod.gloria-jeans.ru
api-asm.new.gloria-jeans.ru
eoiqpm.gloria-jeans.ru
clicks.gloria-jeans.ru
admin-gui-frontend-task-103284-uat.preprod.gloria-jeans.ru
front-kz-test.front.gloria-jeans.ru
blog.gloria-jeans.ru
ensi-connector-task-99623.gs.gloria-jeans.ru
admin-auth-master.gs.gloria-jeans.ru
bu-dev.gs.gloria-jeans.ru
customer-gui-asm-master.preprod.gloria-jeans.ru
oms.preprod.gloria-jeans.ru
help.gloria-jeans.ru

Certificate

The complete raw certificate details for lookbook.gloria-jeans.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEYTCCA0mgAwIBAgISA9fW3ajXLulAq80Ao5I0Q7hJMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMDEyMjMxMzQ0MzRaFw0yMTAzMjMxMzQ0MzRaMCMxITAfBgNVBAMT
GGxvb2tib29rLmdsb3JpYS1qZWFucy5ydTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMR/v2X/ucVa0QXuETX4I4gApGWtmu5dEBtU7vfZVjsOzbYgEoyW
sQAlBM6cnyJpTHJfx8Gp30isUduBNqr3JNqtLeXS0GSKuStgR6OTv0W5tu0ignmP
bfzlkCFUsBvAuJ8cNXa2UxEBGI4znrSiaP3jcih4OkA0ddL33t1qymPA5dipyMIN
GJeX+UhvKJ7jMTzyqm3wt7515d6QdkQsvWloCxRh5+rJMFnWOMFgXjhodnskQcrn
jeF2c5VVum5LUmt6OSS5YONfs2V+hYLSR0fcjSftFgM1FRuvdHfyWxyna+dkjHwo
+CIpZzO7iBY0N/8G5bgzT6J93s0hwxL/CpsCAwEAAaOCAX4wggF6MA4GA1UdDwEB
/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/
BAIwADAdBgNVHQ4EFgQUOAbQ32oJNb7E7euE24EjfHLFMJIwHwYDVR0jBBgwFoAU
FC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzAB
hhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5p
LmxlbmNyLm9yZy8wQQYDVR0RBDowOIIYbG9va2Jvb2suZ2xvcmlhLWplYW5zLnJ1
ghx3d3cubG9va2Jvb2suZ2xvcmlhLWplYW5zLnJ1MEwGA1UdIARFMEMwCAYGZ4EM
AQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0
c2VuY3J5cHQub3JnMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUA
A4IBAQA6/NfPTeFY2MoAG4IH59vF0RQz08Slgp6mG8IYgvNDpXCQ1KBGx667T11L
fbocjRnNjGM0OueWjfIOMv/PaRfshEKkVTHWfy72J5zlOCFobOfB9Wi4/WfXglHm
G+FFLJvrqvGdkiB9nlWgnB9LKlntYyP9raBU/08iDxdPuUg4BRLiGo23YdIx96XM
oO8m+s+jM23O78LxrRnPstskxVdalPQklWCbCuBtZ7HNw7fP7xPzaom3aevBAY8f
xRNOspT8bUOvpSt05UDA/mznQImF1HTFMHzHOos+mXMleF7Pi29sAPxa5N8uxHwy
R4q/ecZLwQXmP2RYPu0uUYytat1m
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH+/Zf+5xVrRBe4RNfgj
iACkZa2a7l0QG1Tu99lWOw7NtiASjJaxACUEzpyfImlMcl/HwanfSKxR24E2qvck
2q0t5dLQZIq5K2BHo5O/Rbm27SKCeY9t/OWQIVSwG8C4nxw1drZTEQEYjjOetKJo
/eNyKHg6QDR10vfe3WrKY8Dl2KnIwg0Yl5f5SG8onuMxPPKqbfC3vnXl3pB2RCy9
aWgLFGHn6skwWdY4wWBeOGh2eyRByueN4XZzlVW6bktSa3o5JLlg41+zZX6FgtJH
R9yNJ+0WAzUVG690d/JbHKdr52SMfCj4IilnM7uIFjQ3/wbluDNPon3ezSHDEv8K
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334783172396479604427820395070413854718025
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-23 13:44:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-23 13:44:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lookbook.gloria-jeans.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24805702487471806661930788827192603183223732137767669099454110490022458437813705582201219323040814048600456639709962494878040900315163632185437784602824280300068082924419217423942957209961140565562528598173599878610420844355008921333119362578405838997543936356921295748556000924407357961129550110743152790215985582522193955152574098862635353216041811285640871809727384458471437250007230165802551549027505239254177185707293358878607226047387337451764800051733401121119824161205844449674758606205619549222441106006850421851372080844960403543215466042473010129919822909198567667969845307287477177131817134188198354684571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3806d0df6a0935bec4edeb84db81237c72c53092
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lookbook.gloria-jeans.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lookbook.gloria-jeans.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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