go.gengo.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b6:6d:b7:57:5d:55:8e:3a:58:5e:8b:e2:fc:9c:17:cd:88 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=go.gengo.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b6:6d:b7:57:5d:55:8e:3a:58:5e:8b:e2:fc:9c:17:cd:88
Serial Number (int): 323414086388721540794158905271735239036296
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 72:25:6e:18:35:55:e4:76:21:c5:65:a6:98:41:e2:22:66:7d:2e:04
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0f:f6:1e:cc:7a:be:93:d4:23:cb:17:ff:4d:2b:16:b8:8c:c4:cc:7e
Fingerprint (sha256): 29:d6:2e:89:fe:2c:f8:c9:6e:04:e7:7d:3f:60:38:9a:09:82:62:d7:1e:21:6e:a8:f3:28:a1:24:26:dd:00:64

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate go.gengo.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for go.gengo.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

go.gengo.com

Other certificates including the domain name gengo.com

(limited to 100 certificates)
ab-status.alloy.co
style.gengo.com
ab-status.alloy.co
ab-status.alloy.co
blog.gengo.com
go.gengo.com
blog.gengo.com
support.gengo.com
ab-status.alloy.co
ab-status.alloy.co
ab-status.alloy.co
blog.gengo.com
go.gengo.com
ab-status.alloy.co
developers.gengo.com
ab-status.alloy.co
ab-status.alloy.co
translate.gengo.com
*.gengo.com
status.bipbop.com.br
blog.gengo.com
*.gengo.com
style.gengo.com
ci.gengo.com
ab-status.alloy.co
api.sandbox.gengo.com
ab-status.alloy.co
ab-status.alloy.co
go.gengo.com
ab-status.alloy.co
ab-status.alloy.co
ab-status.alloy.co
blog.gengo.com
developers.gengo.com
*.staging.gengo.com
status.bipbop.com.br
dashboard.translationexchange.com
ab-status.alloy.co
support.gengo.com
blog.gengo.com
go.gengo.com
style.gengo.com
ab-status.alloy.co
ab-status.alloy.co
support.gengo.com
ab-status.alloy.co
go.gengo.com
style.gengo.com
ab-status.alloy.co
ab-status.alloy.co
ab-status.alloy.co
developers.gengo.com
qa.blog.gengo.com
ab-status.alloy.co
status.bipbop.com.br
style.gengo.com
support.gengo.com
developers.gengo.com
api.sandbox.gengo.com
ab-status.alloy.co
ab-status.alloy.co
ab-status.alloy.co
ab-status.alloy.co
style.gengo.com
ab-status.alloy.co
ab-status.alloy.co
style.gengo.com
developers.gengo.com
ab-status.alloy.co
ab-status.alloy.co
*.gengo.com
ab-status.alloy.co
blog.gengo.com
status.bipbop.com.br
support.gengo.com
ab-status.alloy.co
style.gengo.com
blog.gengo.com
go.gengo.com
*.gengo.com
ab-status.alloy.co
status.bipbop.com.br
support.gengo.com
*.sandbox.gengo.com
developers.gengo.com
*.staging.gengo.com
support.gengo.com
style.gengo.com
ab-status.alloy.co
support.gengo.com
status.bipbop.com.br
blog.gengo.com
*.gengo.com
ab-status.alloy.co
*.qa.gengo.com
ab-status.alloy.co
developers.gengo.com
style.gengo.com
blog.gengo.com
ab-status.alloy.co

Certificate

The complete raw certificate details for go.gengo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHBDCCBeygAwIBAgISA7Ztt1ddVY46WF6L4vycF82IMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA5MDYwNTQxMjVaFw0x
ODEyMDUwNTQxMjVaMBcxFTATBgNVBAMTDGdvLmdlbmdvLmNvbTCCAiIwDQYJKoZI
hvcNAQEBBQADggIPADCCAgoCggIBANKJrUSkZUusToi0gNf5/8mfX1jH3hP7lOqx
MHCly5DyP9u94NFTHUBczAvb50nHKkekTPgc8kpT0sTv9OWbfLxuzxVglCfEfsaD
4L880Coq2vwEUZfpYNiD3eV+mTjUOfTDqxdWEuEznl4imoupbEsTAs4IjCC38gfg
4NMYuMdgTL1VzCUaU3KCPEgytm43bIx1qYRhPEMuwPOhyGGA5HnPbDU6dpZb2A/g
WpymBZo5VuHxvRPr65/8PUB6ysyoPXlKkPJgfjJ4ClcnlXhtbW3tZMIjlcfFV0r6
q4wkjgFv7a+rAUuOM62FBcpwce/oaGl68ne7DX+sDECCrEN9sJ4S7jWUx6U+1Po/
48pR120OxEe8k8Lbm8w+SrAgXT3888cLYXybtgh/r73+tJf5PouVrdHKbAKcybTl
7rVi1zzF/gQuK2yBW0cc+dCxZ0X80eLcndacC0E7FVoR+4eajLClLO4IK/uRQ0PR
KETKjXuzt9a9ePArDPjF5tqPZY+pfYz7LL0Vb8ZZqy8DJEmGgmtKc9DFHPTxZhN9
aYImO068Jeqh34Vk3zWQ4Is20oGctcjFmQ1yHWRmDcjaAAe7jykJCgR3cw4BPKsM
Vy/BjqMNxSVzkeMiMpzbZQJlFy0xc4GJRi0uxlGJBQkCNpoBXio2OI4MseFnYW8m
d/7juMOTAgMBAAGjggMVMIIDETAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFHIlbhg1
VeR2IcVlpphB4iJmfS4EMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh
MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZy8wFwYDVR0RBBAwDoIMZ28uZ2VuZ28uY29tMIH+BgNV
HSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcC
ARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGb
VGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5
aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0
aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcv
cmVwb3NpdG9yeS8wggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgDbdK/uyynssf7K
PnFtLOW5qrs294Rxg8ddnU83th+/ZAAAAWWtnTMyAAAEAwBHMEUCIQCNsySMVQAk
ALMoxvDJMb+e+49KT0JbOkL2T9XsPJZxsQIgcVpsrswAEPS0a7xUj5mLoT/fnWR1
Zd4Jb024KrB6bc0AdwApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAA
AWWtnTNSAAAEAwBIMEYCIQDop5WEDCYyUUZH/fLgla9u4Qzn6MBIeO+Q4fPUjwPh
NgIhAIoCraRdvth6pgBfO1WPIfNd3iSWtSwiimpu8ML9cRmXMA0GCSqGSIb3DQEB
CwUAA4IBAQA9RJUHcJGbxGnFXb7i/JkFE79/9aR7hiYcvTqszgj0QgM+6DHuaToe
dzgdfe7bakS5ML5RI01pjf/5sVaClYQTH7qORrc3lzHhOYJcMQch2Tl8BJiSxiHU
0xs2wMxHqRQnCGke4vn0qbFdRit6L01PC6rTsdWnCJ0S0VFShr2afTTEqSgYS6oq
zgHxoeDPkbliS7WtP5WIaWaQJxsQREHVWbY/Snou8xk7lP3x9m/X5BHXMkxiJU96
ekAkDmsSWu7GRTrGfUIBuZm64GgSyMgsUrB0psTITAYdcqWBVHpOsw1j30HihmhO
AJryMxrqxFde8Il+t0nC6hu3c6o5WmNs
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323414086388721540794158905271735239036296
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-06 05:41:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-05 05:41:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'go.gengo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 858919287320520104372098736442310384299040853881059809089981162968767243512895965465181672301488770881858110604565173936359739499685878390229072991967366248341036041671268591970018180582478765813985799473760222909839414848682557978757512912307868192678187598705387139546540706773254039184288354796712461759536970034283161495983195288019668043330094991636171405657324420104473260138626901101551905895809846816250677193592948001766637345597316067674858000578120412387423569317576061329359722504666325382622025885890906218766693748448300402474270141907971401153841769710415997896003000062934545252962699186978255704402071791224808281533090875391640476087334993259778349075688188788513535377628641228608018827277847841885728139321831920205190370616042425478554476746280390189864518316557466649798747588619844311836656480453191835185948412583334675655706800104919797023742843068437982634171636660125572796050369912757259434045755057027104226790494561832594449659494490342160481307938049393212484345877280088998094036329654343344553416402960408326674398397532563770584196991236506619152882647768703872194363112006198376466668002232230555958670407542101487350005312962598989307925114529676036501447418151023608809565913611133872051490177939
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							72256e183555e47621c565a69841e222667d2e04
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.gengo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000165ad9d333200000403004730450221008db3248c55002400b328c6f0c931bf9efb8f4a4f425b3a42f64fd5ec3c9671b10220715a6caecc0010f4b46bbc548f998ba13fdf9d647565de096f4db82ab07a6dcd007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165ad9d33520000040300483046022100e8a795840c2632514647fdf2e095af6ee10ce7e8c04878ef90e1f3d48f03e1360221008a02ada45dbed87aa6005f3b558f21f35dde2496b52c228a6a6ef0c2fd711997
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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