tls.automattic.com

Issued by R3

About this certificate

This digital certificate with serial number 04:16:4f:2e:e2:e0:ad:18:51:02:bf:ba:cb:16:4d:18:f4:79 was issued on by Let's Encrypt.

With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:16:4f:2e:e2:e0:ad:18:51:02:bf:ba:cb:16:4d:18:f4:79
Serial Number (int): 356040608258249382870674037593937293145209
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 87:d2:0f:6f:9c:78:2a:48:83:85:73:11:ae:87:f7:fc:d8:bd:50:02
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c1:0e:fc:b9:2f:d6:90:26:5a:c2:81:47:b1:3d:3c:0c:d7:ad:af:db
Fingerprint (sha256): 2e:e8:09:b8:8c:b0:70:92:28:b8:03:f0:0b:5b:03:74:4f:eb:ce:9e:9a:43:1f:51:2f:eb:ab:96:7a:f2:40:fb

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tls.automattic.com

49

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

actif.law.blog
amar.code.blog
anxietytreatmentcenterofla.com
bestcoms.jp
billpmusic.music.blog
carslover.car.blog
daren.car.blog
epicruns.co.uk
heartpathreiki.com
heartpeartree.com
heartphones.net
heartpreparation.com
heartrenovation.com
heartruthblog.info
heartsandhandsphotography.com
mydryerventheroes.com
myhomeschoolworkbook.com
orga-med.com
ottogashougaisya1kyuuninattahi.jp
ourtimewilm.org
portcitiesreformed.com
soundsofhope.international
tls.automattic.com
wp-www.parc.com
www.actif.law.blog
www.anxietytreatmentcenterofla.com
www.bestcoms.jp
www.billpmusic.music.blog
www.bristolonline.music.blog
www.carslover.car.blog
www.epicruns.co.uk
www.healthvibe.blog
www.heartpathreiki.com
www.heartpeartree.com
www.heartphones.net
www.heartpreparation.com
www.heartracingdreamchasing.com
www.heartrenovation.com
www.heartrescuegroup.com
www.heartruthblog.info
www.mycluttercutter.com
www.mydryerventheroes.com
www.myhomeschoolworkbook.com
www.ottogashougaisya1kyuuninattahi.jp
www.portcitiesreformed.com
www.regularkid.music.blog
www.sneakerheadbuenosaires.com
www.soundsofhope.international
www.teamtiphainetitouannacra15.sport.blog

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAExMZsxiM8eUVOwpONX1Cl4COGL1Fj
j0iA3BGI3EH25OQdtkOZ3Zkcn+drBKRNwEho7Cz+RFBp2jCOB2n1IF3EXg==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 356040608258249382870674037593937293145209
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-09 15:33:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-09 15:33:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004c4c66cc6233c79454ec2938d5f50a5e023862f51638f4880dc1188dc41f6e4e41db64399dd991c9fe76b04a44dc04868ec2cfe445069da308e0769f5205dc45e
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							87d20f6f9c782a4883857311ae87f7fcd8bd5002
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1190 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actif.law.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amar.code.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anxietytreatmentcenterofla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestcoms.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billpmusic.music.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carslover.car.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daren.car.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicruns.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heartpathreiki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heartpeartree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heartphones.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heartpreparation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heartrenovation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heartruthblog.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heartsandhandsphotography.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydryerventheroes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhomeschoolworkbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orga-med.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ottogashougaisya1kyuuninattahi.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourtimewilm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portcitiesreformed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soundsofhope.international'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wp-www.parc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actif.law.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anxietytreatmentcenterofla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestcoms.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.billpmusic.music.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bristolonline.music.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carslover.car.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epicruns.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthvibe.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heartpathreiki.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heartpeartree.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heartphones.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heartpreparation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heartracingdreamchasing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heartrenovation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heartrescuegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heartruthblog.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mycluttercutter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mydryerventheroes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myhomeschoolworkbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ottogashougaisya1kyuuninattahi.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portcitiesreformed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regularkid.music.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sneakerheadbuenosaires.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soundsofhope.international'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teamtiphainetitouannacra15.sport.blog'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d8eb726c200000403004630440220670eb4020b52cba0dc0b0f4ba0bc08438dac9850081af89d4e50cf7fd7b945eb022043bde10375e59b48c857eaf985e66ed27c4f2fda9556651b3735b9cbae1dc56e00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d8eb727300000040300473045022038ec576955f6657ca1887a8db77c58d4513358f2fcc8d50fca462cbdb712a602022100b248b87b9562c897dffd13168f1d791ddc91843943c4471a3a144d5b37df2d36
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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