xeroxpalit.gtntechsol.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:c0:97:6a:12:82:2b:51:e2:46:99:05:8f:eb:ca:27:ea:85 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=xeroxpalit.gtntechsol.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c0:97:6a:12:82:2b:51:e2:46:99:05:8f:eb:ca:27:ea:85
Serial Number (int): 413984622362088139399555883468077973105285
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 84:9a:4d:67:04:5d:a9:88:ae:b1:2b:2e:32:48:98:aa:73:01:7d:3f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 50:77:9c:7f:cb:08:0a:47:d4:15:56:78:9d:d5:d7:bd:34:cf:1b:1d
Fingerprint (sha256): 2d:4a:70:bd:56:08:d6:5e:25:84:0b:b1:ff:fe:16:9e:3e:5a:e8:ed:2c:a2:aa:d6:bb:f8:9e:60:75:82:cb:5a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate xeroxpalit.gtntechsol.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xeroxpalit.gtntechsol.com

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

xeroxpalit.gtntechsol.com

Other certificates including the domain name gtntechsol.com

(limited to 100 certificates)
*.gtntechsol.com
clubride-ws.gtntechsol.com
fltpkprod.gtntechsol.com
mccln.gtntechsol.com
fltpkprod.gtntechsol.com
mccln.gtntechsol.com
mitigationdashboard.gtntechsol.com
dcwprecon.gtntechsol.com
usace-wordpress-stage.gtntechsol.com
files.gtntechsol.com
ftpmccln.gtntechsol.com
damsafetyresources.gtntechsol.com
mccln.gtntechsol.com
mitigationdashboard.gtntechsol.com
ftoutreach.gtntechsol.com
commute-rebuild.gtntechsol.com
fltpkprod.gtntechsol.com
fltpkprod.gtntechsol.com
clubride.gtntechsol.com
aecomrebuild.gtntechsol.com
xeroxpalit.gtntechsol.com
fltpkprod.gtntechsol.com
*.gtntechsol.com
fltpkprod.gtntechsol.com
mitigationdashboard.gtntechsol.com
usace-wordpress-stage.gtntechsol.com
gategourmet.gtntechsol.com
fltpkprod.gtntechsol.com
ftbrdev.gtntechsol.com
urshelpline.gtntechsol.com
mitigationdashboard.gtntechsol.com
aecomrebuild.gtntechsol.com
urshelpline.gtntechsol.com
gategourmet.gtntechsol.com
ramppdashboard.gtntechsol.com
clubride.gtntechsol.com
ftpmccln.gtntechsol.com
urshelpline.gtntechsol.com
aecomrebuild.gtntechsol.com
*.gtntechsol.com
fltpkprod.gtntechsol.com
urshelpline.gtntechsol.com
ftoutreach.gtntechsol.com
fltpkprod.gtntechsol.com
ftoutreach.gtntechsol.com
aecomrebuild.gtntechsol.com
fltpkprod.gtntechsol.com
mccln.gtntechsol.com
*.gtntechsol.com
files.gtntechsol.com
ftpmccln.gtntechsol.com
aecomrebuild.gtntechsol.com
*.gtntechsol.com
aecomrebuild.gtntechsol.com
ramppdashboard.gtntechsol.com
mccln.gtntechsol.com
metrobus-stage.gtntechsol.com
aecomrebuild.gtntechsol.com
aecomrebuild.gtntechsol.com
clubride-site.gtntechsol.com
*.gtntechsol.com
clubride.gtntechsol.com
sunguide-stage.gtntechsol.com
clubride-site.gtntechsol.com
urshelpline.gtntechsol.com
mccln.gtntechsol.com
ramppdashboard.gtntechsol.com
*.gtntechsol.com
sunguide-stage.gtntechsol.com
fltpkprod.gtntechsol.com
gategourmet.gtntechsol.com
mccln.gtntechsol.com
sunguide-stage.gtntechsol.com
metrobus-stage.gtntechsol.com
amsstage.gtntechsol.com
*.gtntechsol.com
ramppdashboard.gtntechsol.com
aecomrebuild.gtntechsol.com
ftpmccln.gtntechsol.com
clubride-site.gtntechsol.com
fltpkprod.gtntechsol.com
ftoutreach.gtntechsol.com
ftpmccln.gtntechsol.com
commute-rebuild.gtntechsol.com
ams.gtntechsol.com
mitigationdashboard.gtntechsol.com
sunguide-stage.gtntechsol.com
ftpmccln.gtntechsol.com
*.gtntechsol.com
mccln.gtntechsol.com
ftoutreach.gtntechsol.com
xeroxpalit.gtntechsol.com
clubride.gtntechsol.com
mccln.gtntechsol.com
fltpkprod.gtntechsol.com
fltpkprod.gtntechsol.com
clubride.gtntechsol.com
ramppdashboard.gtntechsol.com
ftoutreach.gtntechsol.com
ftpmccln.gtntechsol.com

Certificate

The complete raw certificate details for xeroxpalit.gtntechsol.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF6jCCBNKgAwIBAgISBMCXahKCK1HiRpkFj+vKJ+qFMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMDMxMzMwMTZaFw0y
MDA2MDExMzMwMTZaMCQxIjAgBgNVBAMTGXhlcm94cGFsaXQuZ3RudGVjaHNvbC5j
b20wggGiMA0GCSqGSIb3DQEBAQUAA4IBjwAwggGKAoIBgQCUseFgKNb4+o8b+5Dk
Dr1qG7ZoV9axTxv7+C51MNHrANxaFbxvslXSH/kooS+1eJFAMxgo8wTkyxWiVozJ
GVtcesBxuetzCvlSgTOYCctvHOOEObm6O3QVjS2OouBtZeq1Fue6sxzUS6QElRvG
9GiDPLi8gISR/+C/cejhgMniRUm9kTx3NB/se2mibF3t8h8XIT7pF1j6PoTT8uy5
SrdZqCdh/AOq6hYx+rleXiKy6QJzIiFZKZTJaNbzVPQS1cyYSEy2IsdBrFjUr2d9
A/JlIGoV5/IqLAkmpvJvo5stJ2bMTUCCojpRGt/KjZoDlNF1lNsOvCCBTFwSC+LL
h/Di3v6iujf6De77JO3S65ZpUwnBrakFaEqetvHXFoY+9HXska5zRLSZNdWGLelE
FTq8v2aBey/98p3zZpgqT+N+aY717AZheOohXl3uTjGZ1Ju1T0QfOFWgBbWoXmt4
k7kBPsJ1VCmYIsY4xiRR2ZdCocpMcY5Jl7AY63KFF2O7JZcCAwEAAaOCAm4wggJq
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUhJpNZwRdqYiusSsuMkiYqnMBfT8wHwYD
VR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4G
CCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8G
CCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAk
BgNVHREEHTAbghl4ZXJveHBhbGl0Lmd0bnRlY2hzb2wuY29tMEwGA1UdIARFMEMw
CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j
cHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYA5xLy
sDd+GmL7jskMYYTx6ns3y1YdESZb8+DzS/JBVG4AAAFwoM30IgAABAMARzBFAiBA
k/q+A9mNwISQS2GKo+hTzicm4lxwAa8/j2/3qCsChAIhAJNkj8/opEqF66fN4D7R
Qqs+8Hn7GftsNmeKbthNyoPTAHYAB7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6
GmnTohwAAAFwoM30WwAABAMARzBFAiEA1oS2RCJWVUd1qNnFXFYhTLpHKumYhbbc
HhQoM4GA8WgCIFxWKtL48EZgzC3ZWj5/6IFFfXeICsMrfu0N/aWL5u80MA0GCSqG
SIb3DQEBCwUAA4IBAQBbBb1hvvfU16IhYwv1xSGYra7B4+psygqn4fzaQxhhGJ2W
3G1DZR35vjrqG5ZXDFZAOEUVHGXXRSfSJHAkQ8SaGnMugU2pCdO3IzX8fsyuvE+3
MwyRXmQ5LhR02X1df2ifYroIUbHuivEJT+XC/BL4TpxdDVbPUG90aSkup/+CFG7V
ze8Fp2h6KhlKzyULnQ5uLrIXOHchc827H94vOwKhJaedKMtDarpcOJN32EA6xHKO
W9Ded349zPAKmSbOVP0QUs3pjXdeYr/QWsLrtgEVQqBEwjAelJtdp4duZgdr3tDZ
RNLeR4j9TYV0G5xTB7K0jgst1VG9MtNtIaYuQMk0
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 413984622362088139399555883468077973105285
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 13:30:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-01 13:30:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xeroxpalit.gtntechsol.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3374447125809994777099385651428218395965343902262896830136634235544326490053127850866307476712280118093927452624095341256444465343108602330040583388653224733694010027848173099006701605819229616203522441022348867409304849832291080772940494646156151672548592668653182803113868912090829183595536058678563316327449822600794167123613294021001891237950337495658520683267304462899586643410108321170001229340356083239548585329494530737393904660074450038815380136291705111704617330598772042264176116290208924220887393084467881651300819242092232694054205538899654473863567211285902047552780739618466151767490547701309108176028357028614021177521858102381887189013068083913812799949723651319068054719127281344955732719776488118752526333502724959484175730430990898358561691044619242242806035467825239432567207207539506030447722481429391327969460990052616222221942907263706386543870946083657976948466291058376484500920176985464462800266647
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							849a4d67045da988aeb12b2e324898aa73017d3f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xeroxpalit.gtntechsol.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170a0cdf422000004030047304502204093fabe03d98dc084904b618aa3e853ce2726e25c7001af3f8f6ff7a82b028402210093648fcfe8a44a85eba7cde03ed142ab3ef079fb19fb6c36678a6ed84dca83d300760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170a0cdf45b0000040300473045022100d684b6442256554775a8d9c55c56214cba472ae99885b6dc1e1428338180f16802205c562ad2f8f04660cc2dd95a3e7fe881457d77880ac32b7eed0dfda58be6ef34
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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