directoriosancionados.funcionpublica.gob.mx

- Secretaria De La Funcion Publica -

Issued by AffirmTrust Certificate Authority - OV1

About this certificate

This digital certificate with serial number ef:d5:c7:5f:e5:b4:53:3d:00:00:00:00:58:08:91:cd was issued on by AffirmTrust.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Secretaria De La Funcion Publica

Organization: Secretaria De La Funcion Publica
State / Province: Ciudad De Mexico
Locality: Ciudad De Mexico
Country: MX

AffirmTrust

Organization: AffirmTrust
Organization unit: See www.affirmtrust.com/repository
Country: CA

This certificate has expire since

Certificate Details

Serial Number (hex): ef:d5:c7:5f:e5:b4:53:3d:00:00:00:00:58:08:91:cd
Serial Number (int): 318795494020739444424701440682541748685
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: c7:7b:ab:fb:55:d9:fd:d0:e4:07:03:50:74:b8:44:7c:84:1b:60:6a
AuthorityKeyId: fe:60:c3:0d:a4:a2:9d:21:4f:7a:78:4c:62:c5:db:14:fc:39:78:c4

Fingerprint (sha1): 81:ad:79:b7:d5:3d:f5:94:ea:93:be:eb:6d:49:63:97:cc:56:78:c9
Fingerprint (sha256): 2a:b4:29:71:d3:ef:77:b9:8a:95:1e:c2:f1:c3:b3:5a:6b:f1:a9:d3:de:9b:31:fb:e2:7d:12:5a:fe:1e:26:27

Issuing Certificate URL: http://aia.affirmtrust.com/aftov1ca.crt

Revocation information

OCSP Server: http://ocsp.affirmtrust.com
CRL Distribution Point: http://crl.affirmtrust.com/crl/aftov1ca.crl

Check the revocation status for certificate directoriosancionados.funcionpublica.gob.mx

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for directoriosancionados.funcionpublica.gob.mx

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

directoriosancionados.funcionpublica.gob.mx

Other certificates including the domain name funcionpublica.gob.mx

(limited to 100 certificates)
alertadorescontralacorrupcion.funcionpublica.gob.mx
le-507.dkla8s.funcionpublica.gob.mx
www01.funcionpublica.gob.mx
le-166.k8s.funcionpublica.gob.mx
le-166.apps.funcionpublica.gob.mx
controlinterno.funcionpublica.gob.mx
le-430.apps.funcionpublica.gob.mx
compranet.funcionpublica.gob.mx
storage.apps.funcionpublica.gob.mx
funcionpublica.gob.mx
le-232.k8s.funcionpublica.gob.mx
siac.funcionpublica.gob.mx
aga-gobierno-abierto.k8s.funcionpublica.gob.mx
sipmg.funcionpublica.gob.mx
genero.funcionpublica.gob.mx
cnet.funcionpublica.gob.mx
*.funcionpublica.gob.mx
le-358.dkla8s.funcionpublica.gob.mx
le-213.k8s.funcionpublica.gob.mx
sidec.funcionpublica.gob.mx
compras.funcionpublica.gob.mx
le-253.k8s.funcionpublica.gob.mx
le-322.k8s.funcionpublica.gob.mx
ssecoe.funcionpublica.gob.mx
alertadorescontralacorrupcion.funcionpublica.gob.mx
le-322.k8s.funcionpublica.gob.mx
cdn.k8s.funcionpublica.gob.mx
storage.apps.funcionpublica.gob.mx
storage.apps.funcionpublica.gob.mx
le-725.apps.funcionpublica.gob.mx
funcionpublica.gob.mx
le-325.k8s.funcionpublica.gob.mx
funcionpublica.gob.mx
le-299.k8s.funcionpublica.gob.mx
directoriosancionados.funcionpublica.gob.mx
siac.funcionpublica.gob.mx
le-166.apps.funcionpublica.gob.mx
convenciones.funcionpublica.gob.mx
declaranet.gob.mx
le-70.200.34.175.120.nip.io
le-213.k8s.funcionpublica.gob.mx
capacita.funcionpublica.gob.mx
le.k8s.funcionpublica.gob.mx
sideof.funcionpublica.gob.mx
correo.funcionpublica.gob.mx
compranet-test.funcionpublica.gob.mx
onboarding.capacitacion.apps.funcionpublica.gob.mx
capacita.funcionpublica.gob.mx
le-322.k8s.funcionpublica.gob.mx
compranet.funcionpublica.gob.mx
sidec.funcionpublica.gob.mx
le-70.200.34.175.120.nip.io
manifiesto.funcionpublica.gob.mx
le-1304.k8s.funcionpublica.gob.mx
compranet.funcionpublica.gob.mx
alertadores.funcionpublica.gob.mx
le-495.k8s.funcionpublica.gob.mx
le-1304.k8s.funcionpublica.gob.mx
le-322.k8s.funcionpublica.gob.mx
dns1.funcionpublica.gob.mx
siippg.funcionpublica.gob.mx
le-228.k8s.funcionpublica.gob.mx
sideof.funcionpublica.gob.mx
gitlab.funcionpublica.gob.mx
sonar.apps.funcionpublica.gob.mx
manifiesto.funcionpublica.gob.mx
le.k8s.funcionpublica.gob.mx
le-449.k8s.funcionpublica.gob.mx
le.k8s.funcionpublica.gob.mx
sfp-sharepoint.funcionpublica.gob.mx
le.k8s.funcionpublica.gob.mx
le-253.k8s.funcionpublica.gob.mx
servicios.apps.funcionpublica.gob.mx
le-36.200.34.175.120.nip.io
siippg.funcionpublica.gob.mx
cnet.funcionpublica.gob.mx
le-325.k8s.funcionpublica.gob.mx
funcionpublica.gob.mx
le-549.k8s.funcionpublica.gob.mx
capacita.funcionpublica.gob.mx
datosabiertos.funcionpublica.gob.mx
le-495.k8s.funcionpublica.gob.mx
siippg.funcionpublica.gob.mx
le-238.k8s.funcionpublica.gob.mx
storage.apps.funcionpublica.gob.mx
le-358.dkla8s.funcionpublica.gob.mx
le-299.k8s.funcionpublica.gob.mx
le-70.200.34.175.120.nip.io
siac.funcionpublica.gob.mx
cdn.k8s.funcionpublica.gob.mx
*.funcionpublica.gob.mx
le-400.k8s.funcionpublica.gob.mx
funcionpublica.gob.mx
sfpbpm01.funcionpublica.gob.mx
*.funcionpublica.gob.mx
sideof.funcionpublica.gob.mx
apps.funcionpublica.gob.mx
sira.funcionpublica.gob.mx
sfpwfbi.funcionpublica.gob.mx
sipmg.funcionpublica.gob.mx

Certificate

The complete raw certificate details for directoriosancionados.funcionpublica.gob.mx in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ITnPc1RcdqBDtY7D1dk
UMpZaQCnvZSz3ZhD04gSIKXVFseh5M9+b5+CbVALwrQJiRXJXzcF3olbCUqRXekt
skxT8oXE/ux9nfJrg7KZemt+Dsr+GA35ihNprhBsETjrXLVGHZMxf51gjnNwwLc/
ayji9YGmuGnwpxG0G1a/ca5vGQT+FdKrB2xxOUEdRYDqkStcRnEDT2zWaRHVPbCu
38fdwVw4UsQcYH4TumcRU4mJqkYFVD9eF/v0HSQM6nkkTdV+1Ie58F2w6MIruG2R
S8onevfP0XFPfXwEhte55HtTcQc/omym/6PJ0mcWlHj3flBm1nSRyk9jkuNgk8mE
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318795494020739444424701440682541748685
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.affirmtrust.com/repository'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust Certificate Authority - OV1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-13 19:05:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-13 19:35:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MX'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ciudad De Mexico'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ciudad De Mexico'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Secretaria De La Funcion Publica'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'directoriosancionados.funcionpublica.gob.mx'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28847870585569076011878424984915238176541614531109497628543613324342681375499837823360902459765018950583634862081419745297122576049295331798095995714500022049741317641156861765627948225497370527625966351370249038805556554679485180785752487696590823761543571219385057568231592099257396975210846514010448254361648058824488098657749923314816539508674459705492835432356974435925877670444079790788990693606483118982503493032240170287808984763952702173184887079944751235437754370139318579607268239573728278564898579165618044805779062168948103236278955103889246295295160664871483684136200062855974521795114459081592122475523
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directoriosancionados.funcionpublica.gob.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.affirmtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.affirmtrust.com/aftov1ca.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.34697.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.affirmtrust.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.affirmtrust.com/crl/aftov1ca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe60c30da4a29d214f7a784c62c5db14fc3978c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c77babfb55d9fdd0e407035074b8447c841b606a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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