kf.mfa.gr

Issued by R3

About this certificate

This digital certificate with serial number 04:9a:d6:e7:7b:af:fb:ce:6b:91:5d:66:eb:91:21:87:30:70 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kf.mfa.gr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9a:d6:e7:7b:af:fb:ce:6b:91:5d:66:eb:91:21:87:30:70
Serial Number (int): 401138284953217043475149334143858645610608
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5c:01:e7:24:3d:c6:9a:6f:de:cd:b6:fd:c9:2b:30:e5:72:61:d0:15
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b5:1a:c3:08:f1:8b:6b:61:f3:9d:01:98:c1:3e:7f:c2:78:4d:f6:60
Fingerprint (sha256): 2a:64:8c:01:58:57:d4:1e:c8:ca:ab:63:8a:57:6d:a7:47:eb:43:0c:79:93:f3:1a:93:58:d0:01:c9:b2:56:70

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kf.mfa.gr

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kf.mfa.gr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ee.mfa.gr
kc.mfa.gr
kf.mfa.gr

Other certificates including the domain name mfa.gr

(limited to 100 certificates)
ypenim.mfa.gr
ypenim.mfa.gr
kf.mfa.gr
mail.mfa.gr
ypenim.mfa.gr
cixplap-acc.mfa.gr
ihra2021.mfa.gr
incapsula.com
www.gov.gr
hellenicaid.gr
git.mfa.gr
www.gov.gr
appointment.mfa.gr
*.press.mfa.gr
x.mfa.gr
www.gov.gr
hellenicaid.gr
x.mfa.gr
catalogue.mfa.gr
ihra2021.mfa.gr
www.mfa.gr
www.mfa.gr
protocoline.mfa.gr
mfa.gr
files.mfa.gr
cixplap-acc.mfa.gr
nautilus-1.mfa.gr
200years.mfa.gr
x.mfa.gr
www.gov.gr
arxeio.mfa.gr
hellenicaid.mfa.gr
cixplap.mfa.gr
www.gov.gr
git.mfa.gr
www.gov.gr
appointment.mfa.gr
hellenicaid.mfa.gr
visportaltest.mfa.gr
shde.mfa.gr
git.mfa.gr
www.gov.gr
vivlio.mfa.gr
www.gov.gr
incapsula.com
catalogue.mfa.gr
mail.mfa.gr
200years.mfa.gr
vivlio.mfa.gr
ihra2021.mfa.gr
ypenim.mfa.gr
mail.mfa.gr
git.mfa.gr
www.gov.gr
www.mfa.gr
catalogue.mfa.gr
vivlio.mfa.gr
catalogue.mfa.gr
catalogue.mfa.gr
kf.mfa.gr
pharos.mfa.gr
cixplap.mfa.gr
danae.mfa.gr
e-visa.mfa.gr
mail.mfa.gr
www.gov.gr
e-visa.mfa.gr
mail.mfa.gr
www.gov.gr
www.gov.gr
protocoline.mfa.gr
ihra2021.mfa.gr
ypenim.mfa.gr
www.gov.gr
mfa.gr
navapi.mfa.gr
ypenim.mfa.gr
mfa.gr
200years.mfa.gr
hellenicaid.mfa.gr
kf.mfa.gr
hellenicaid.mfa.gr
git.mfa.gr
ypenim.mfa.gr
e-visa.mfa.gr
hellenicaid.mfa.gr
hellenicaid.gr
vivlio.mfa.gr
200years.mfa.gr
ypenim.mfa.gr
appointment.mfa.gr
cixplap-acc.mfa.gr
files.mfa.gr
mail.mfa.gr
incapsula.com
hellenicaid.mfa.gr
pharos.mfa.gr
www.gov.gr
hellenicaid.gr
x.mfa.gr

Certificate

The complete raw certificate details for kf.mfa.gr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGLTCCBRWgAwIBAgISBJrW53uv+85rkV1m65EhhzBwMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTExMjMxNjM2NTBaFw0yMjAyMjExNjM2NDlaMBQxEjAQBgNVBAMT
CWtmLm1mYS5ncjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK8W52DL
5oeA4x/u6W7U/Lp7VSMwJhmeAV8PDyFYPLVIvesY9HamRSWVhhN+9FMNs4YNDTY5
qRJCvHanZnnXPC00LOvIu8bZO0viQc6/RTuJipYYMmeUM4ZRC0/ZiMU4fli4pyky
VZ7lVK/smWK1IzaMKcq6hbFk//iUmnEU3Xl9IMTf4jOhKHimF3cwiMkmBbQrAril
n1bxx0QhmDcAPKLsKwNN2KpZZACHzxGW+5mmWABsJHJhDj4HX+g90bHMQFhbCkrN
3eyrY9MpDbGGVf6qR79Z13fsVl2EFGdez+QjWHAytBrV7s09yKuPsolH4PYX9WY7
Cg9Eh6vJg6kmnE9/CiVj1wgP4j2pE48Mn22/3U3fQVdtf2SeQnYMuwj4VCkEQ96X
TJU6ZPZ4XZOMiYaCg3H91OLCl+KlD+n8qGItHyz1fUb652BtcLENbFFX+r+DCwcc
EPuwCmRus2nYxv7STkHhljUbRnwMG7bYb9MfG/x7iZ8LtkLWaU6c9yWIJM8XFvYf
bdshvJyJ/3pRHb5+GUIq3KepYchdjN6dR44UCh/wgYqu+K/7zdBPw07UjmfgO9f0
lUDZO4qP6O01JpX7FXzCM31TLE1mqoukmejNV10SnOE17NEDcSZ1rK3RdUJjn9HC
ASiOavLuE1N2ZaTT299pw+d3xFTen+QDOT15AgMBAAGjggJZMIICVTAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB
/wQCMAAwHQYDVR0OBBYEFFwB5yQ9xppv3s22/ckrMOVyYdAVMB8GA1UdIwQYMBaA
FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw
AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu
aS5sZW5jci5vcmcvMCoGA1UdEQQjMCGCCWVlLm1mYS5ncoIJa2MubWZhLmdygglr
Zi5tZmEuZ3IwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm
BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEE
AdZ5AgQCBIH0BIHxAO8AdgBGpVXrdfqRIDC1oolp9PN9ESxBdL79SbiFq/L8cP5t
RwAAAX1N3ypbAAAEAwBHMEUCIGcEiA38E56spws7YtIuwt1nHpGYVWsU6nU/12RG
bSaBAiEA2GbFFDGt5+0wbeUiP1glJJDFetPEx9KiNxyRykzlvQAAdQDfpV6raIJP
H2yt7rhfTj5a6s2iEqRqXo47EsAgRFwqcwAAAX1N3ywXAAAEAwBGMEQCIA8rkVLi
s2yrrvv5aGFkxDUtdNn61dirWDcStWMuT39qAiBNh7HEFQIkJUeepFrA966PV/Wu
Wa6RbBux4nGk5WOyITANBgkqhkiG9w0BAQsFAAOCAQEASm/tUfUV7Gz2cnrnvlCt
1U2/trctU3W5bpt6LmPnACKUmASBNfRRZxUL7sGlNySID1EiVRsfZOn0b0g90UKr
Dt1mKVyhbfq2Hyi2HY7BxxIREdrj7hfAgNgHw8tXcGS+j2Sv/TzZ58j3sex7sYgS
BnHYoD0JdGo+fzL0yCo80sBIuqSQRLYVcnFmDL0rmwT5j0jUjLWvyFVqfiZkkQCI
6cP6FalGODzoIvc8KnrCOjFINrvD4l3F84fdW7OBeth6Oxuz6Ov0fwZ7dqObLIkD
tuhaFUMkKA5LE5BxPWXc8yAb0FMhny7us/tJ9pu/ngReW+VyObcCg+5lU4f7H7P6
mw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 401138284953217043475149334143858645610608
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-23 16:36:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-21 16:36:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kf.mfa.gr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 714302709702140099834998671093731816336940138107563862350908307724986806619855249150938009538763326036456724724074161967712900148868084338096014904005426724885792127745053207100443179101302432648321523867592332458013686138998232852994317579494227671499327983596683474901323272189555025880510631588263964728492829360468926428111441011555907367155061061184773515828752953285487991748952676803458000226228888876221830242335809888289343629400288341881235045313083970821088043670912486954201958915066695857329251883583168089475140678824927046225285731039620569827580071157857130882911930855585814356451823442081815395742619063419161612704604334258845705819579378028703921432986347780637210850448231720842973547751543834963893456878322446649604010819575684799981869537880127403296103153271257618638910856107269943617618850998174990008905272257783914127503014032673372292469313084144695755836043900940931349312237749374888142956975105986256538426921441159184366060659852106653504554492960182584365905598441874091058272601367198756919746977683926236341677678320422093418757685211723100836563926855867188423992748810079792895498474845033906256423862373756015412061812815207053634202045004470702220200602470624668216593297153282079849837051257
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5c01e7243dc69a6fdecdb6fdc92b30e57261d015
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ee.mfa.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kc.mfa.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kf.mfa.gr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017d4ddf2a5b000004030047304502206704880dfc139eaca70b3b62d22ec2dd671e9198556b14ea753fd764466d2681022100d866c51431ade7ed306de5223f58252490c57ad3c4c7d2a2371c91ca4ce5bd00007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017d4ddf2c17000004030046304402200f2b9152e2b36cabaefbf9686164c4352d74d9fad5d8ab583712b5632e4f7f6a02204d87b1c415022425479ea45ac0f7ae8f57f5ae59ae916c1bb1e271a4e563b221
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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