*.test.k8s.centrio.com

Issued by R3

About this certificate

This digital certificate with serial number 04:7a:0e:2d:03:26:c6:96:60:6c:8b:49:50:b8:65:4f:f2:a3 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.test.k8s.centrio.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7a:0e:2d:03:26:c6:96:60:6c:8b:49:50:b8:65:4f:f2:a3
Serial Number (int): 389982435400614460831155329263809294496419
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 48:60:33:46:63:ec:15:4c:87:08:2f:71:f9:aa:fc:a6:98:dd:70:cb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6a:17:a2:e9:6e:64:f4:46:ee:e3:b8:59:2b:d7:09:f5:6f:e6:2c:f9
Fingerprint (sha256): 2c:f2:ed:58:0e:d4:e6:d8:3a:e9:b5:5a:6d:80:0d:e2:bc:09:42:2d:8b:f1:5d:a7:e7:d9:f9:15:0d:ce:5d:36

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.test.k8s.centrio.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.test.k8s.centrio.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.k8s.sandbox.us-east-1.centrio.com
*.k8s.sandbox.us-west-2.centrio.com
*.k8s.test.us-east-1.centrio.com
*.k8s.test.us-west-2.centrio.com
*.sandbox.blendlabs.com
*.sandbox.centrio.com
*.sandbox.us-east-1.blendlabs.com
*.sandbox.us-east-1.centrio.com
*.sandbox.us-west-2.blendlabs.com
*.sandbox.us-west-2.centrio.com
*.test-mirror.k8s.centrio.com
*.test.k8s.centrio.com
*.test.us-east-1.centrio.com
*.test.us-west-2.centrio.com
sandbox.blendlabs.com
sandbox.centrio.com
sandbox.us-east-1.blendlabs.com
sandbox.us-east-1.centrio.com
sandbox.us-west-2.blendlabs.com
sandbox.us-west-2.centrio.com
test-mirror.k8s.centrio.com
test.k8s.centrio.com
test.us-east-1.centrio.com
test.us-west-2.centrio.com

Other certificates including the domain name centrio.com

(limited to 100 certificates)
paultest.sandbox.centrio.com
*.sandbox.centrio.com
paultest.sandbox.centrio.com
faye.sandbox.centrio.com
*.istio.test.k8s.centrio.com
vpn2.centrio.com
*.sandbox.k8s.centrio.com
paultest1.sandbox.centrio.com
prometheus.test.k8s.centrio.com
radius.sandbox.centrio.com
proxy.sandbox.centrio.com
www.centrio.com
*.istio.sandbox.k8s.centrio.com
pong.centrio.com
prometheus.test.k8s.centrio.com
certmanager.sandbox.centrio.com
cert-test.sandbox.centrio.com
*.sandbox.k8s.centrio.com
*.sandbox.k8s.centrio.com
centrio.com
*.top.k8s.centrio.com
*.sandbox.centrio.com
*.sandbox.centrio.com
cartography.sandbox.centrio.com
smartsafe.sandbox.centrio.com
*.test-us-east-1.k8s.us-east-1.centrio.com
*.k8s.sandbox.us-east-1.centrio.com
*.test.k8s.centrio.com
*.sandbox.k8s.centrio.com
www.centrio.com
*.sandbox.centrio.com
*.chinmaya.k8s.centrio.com
*.test.k8s.centrio.com
*.test-us-east-1.k8s.us-east-1.centrio.com
certmanager.sandbox.centrio.com
paultest.sandbox.centrio.com
www.centrio.com
*.istio.sandbox-tenants.k8s.centrio.com
*.test-us-east-1.k8s.us-east-1.centrio.com
prometheus.chinmaya.k8s.centrio.com
*.k8s.sandbox.centrio.com
proxy.sandbox.centrio.com
*.sandbox-tenants.k8s.centrio.com
paultest1.sandbox.centrio.com
certmanager.sandbox.centrio.com
*.test-us-west-2.k8s.us-west-2.centrio.com
www.centrio.com
mulesoft-byte-dev.sandbox.centrio.com
*.sandbox.centrio.com
culture-board.app-container.vpn.centrio.com
*.sandbox.k8s.centrio.com
vault-infrastructure.test.us-west-2.centrio.com
*.sandbox.k8s.centrio.com
*.top.k8s.centrio.com
*.test.k8s.centrio.com
vision.sandbox.centrio.com
*.mt.k8s.centrio.com
*.sandbox.centrio.com
centrio.com
grafana.sandbox.k8s.centrio.com
*.test.k8s.centrio.com
centrio.com
www.centrio.com
paultest.sandbox.centrio.com
faye.sandbox.centrio.com
*.sandbox.k8s.centrio.com
test.chan.k8s.centrio.com
paultest1.sandbox.centrio.com
*.sandbox.k8s.centrio.com
prometheus.sandbox.k8s.centrio.com
mulesoft-byte-dev.sandbox.centrio.com
www.centrio.com
proxy.sandbox.centrio.com
pdfkit.sandbox.k8s.centrio.com
*.sandbox.centrio.com
centrio.com
tinode.co
prometheus.chinmaya.k8s.centrio.com
grafana.top.k8s.centrio.com
prometheus.test.k8s.centrio.com
prometheus.top.k8s.centrio.com
*.test.k8s.centrio.com
proxy.sandbox.centrio.com
paultest1.sandbox.centrio.com
*.sandbox.centrio.com
pong.centrio.com
paultest1.sandbox.centrio.com
*.istio.test.k8s.centrio.com
*.istio.sandbox-tenants.k8s.centrio.com
*.sandbox.k8s.centrio.com
smartsafe.sandbox.centrio.com
*.test-us-east-1.k8s.us-east-1.centrio.com
paultest.sandbox.centrio.com
gse-api.sandbox.k8s.centrio.com
*.istio.sandbox-tenants.k8s.centrio.com
paultest1.sandbox.centrio.com
*.sandbox.k8s.centrio.com
blahblahblah.sandbox.centrio.com
sandbox.k8s.centrio.com
paultest1.sandbox.centrio.com

Certificate

The complete raw certificate details for *.test.k8s.centrio.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWVKC0CxYnKg3VAWPskV
mmY/4svcIWxtyaF1Dg+dfFyyq8btfBu8bZYEDn/81+IGDt67ROz25EzE78SE68IQ
clsv3p5p8yV2XxAjheTGViJB1wmwdtghWEQJitY/yeM+TIwH6ZXHjWH8iFLRQJ1J
2YH+wQ5qznxnBsZ1TuCJrXGZG5vjQgHQloz3g/mqvVhbL1boqV9IDOU1H0qIXMG8
tTpW7PTh1bIrKkAGnXDqYD8ppy0qydmGNuHVgDIU/AXu1U0ohnmiaW9fekrFpR1Y
tT5Btd734anid/frRojtwmqJixbb82qxq5+ma+CDQTIomKgp9MKwGy1zPnJXCLBd
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 389982435400614460831155329263809294496419
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-04 20:19:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-03 20:19:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.test.k8s.centrio.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25423846881135033621922640433196347369696198542237998183459839429081743249776997921924943120933701719194579157472752964884840737098827127319777755168658050367077204086815899586826711896944620845573728770109543861604125407949142100923089981463683020097320451759776988670740395382307336989002447361034292930298983482387351453555405820962566409371663461798613179103396171866340417152293432264791300606339031553133340407409856739344735969419453306852352739772911197608681891169198633886745779901235542421168234135842611666052102225620064223772656563416204045926582425169274645183818636655925327688895963423292832986717607
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4860334663ec154c87082f71f9aafca698dd70cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (724 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.k8s.sandbox.us-east-1.centrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.k8s.sandbox.us-west-2.centrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.k8s.test.us-east-1.centrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.k8s.test.us-west-2.centrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandbox.blendlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandbox.centrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandbox.us-east-1.blendlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandbox.us-east-1.centrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandbox.us-west-2.blendlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandbox.us-west-2.centrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test-mirror.k8s.centrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.k8s.centrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.us-east-1.centrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.us-west-2.centrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.blendlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.centrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.us-east-1.blendlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.us-east-1.centrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.us-west-2.blendlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.us-west-2.centrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-mirror.k8s.centrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.k8s.centrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.us-east-1.centrio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.us-west-2.centrio.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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