aspis.aau.at

Issued by R3

About this certificate

This digital certificate with serial number 04:68:c5:fd:67:47:5e:1e:09:44:f7:8d:b9:09:b2:c7:14:05 was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aspis.aau.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:68:c5:fd:67:47:5e:1e:09:44:f7:8d:b9:09:b2:c7:14:05
Serial Number (int): 384101683547835941142144756960514382697477
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6c:8b:ae:ee:61:99:8f:53:49:04:7c:9f:0e:a9:0a:69:f9:a0:05:34
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ec:9c:80:7e:a6:a3:43:1a:c5:5a:50:e6:89:c4:8b:81:df:d8:23:db
Fingerprint (sha256): 31:37:d9:b7:25:b3:0e:2c:2e:d2:cf:eb:15:65:59:43:77:08:1d:3e:2b:8c:2d:91:1a:37:a5:6d:1c:63:2c:30

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate aspis.aau.at

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aspis.aau.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aspis.aau.at
aspis.uni-klu.ac.at
www.aspis.aau.at
www.aspis.uni-klu.ac.at

Other certificates including the domain name aau.at

(limited to 100 certificates)
studdorf.aau.at
clouare.aau.at
shib.aau.at
campus-gis.aau.at
scs-iwas.aau.at
qualitative-content-analysis.aau.at
elearning.aau.at
lab-iid.aau.at
dx-workshop.org
seafile.aau.at
survey-test.aau.at
web-ainf.aau.at
dx-workshop.org
survey.aau.at
ae-ainf.aau.at
seafile.aau.at
pervasive.aau.at
www.stat.aau.at
swilt.aau.at
jobs.aau.at
www.itec.aau.at
ub.aau.at
mobile.aau.at
scs-iwas.aau.at
kiss.aau.at
uniclub.aau.at
lab-iid.aau.at
elearning.aau.at
uniclub.aau.at
narrativeencounters.aau.at
rooms.nes.aau.at
lids.aau.at
doku-inf.aau.at
narrativeencounters.aau.at
ameise.aau.at
icn.itec.aau.at
moodle.aau.at
campusplan.aau.at
newsletter.uniclub.aau.at
scs-iwas.aau.at
bscw.aau.at
wiki.nes.aau.at
dia-2018.aau.at
pfl.aau.at
trusteye.nes.aau.at
informatikwerkstatt.aau.at
vulnscan.zid.aau.at
mailbox.itec.aau.at
pfl.aau.at
tomwinkler.nes.aau.at
svn-itec.aau.at
data.aau.at
ius2.aau.at
sepse-iid.aau.at
www-app1.aau.at
www.aau.at
tech.nes.aau.at
moodle-standby.aau.at
kcgl.aau.at
kindergruppe.aau.at
crowdmeteodata.aau.at
data.aau.at
video.aau.at
apollon.aau.at
lab-iid.aau.at
aau.at
kiss.aau.at
darwin-isys.aau.at
ius.aau.at
indy.nes.aau.at
codex-management.aau.at
litkult1920er.aau.at
trusteye.nes.aau.at
wiki-ainf.aau.at
mmsys2016.itec.aau.at
ahesn.aau.at
informatik-spl.aau.at
me-sci.aau.at
crosmos.nes.aau.at
dia-2018.aau.at
saner.aau.at
uniclub.aau.at
spiderino.nes.aau.at
doku-inf.aau.at
ide.aau.at
tewiki.uni-klu.ac.at
mc40.aau.at
usionline.aau.at
ius.aau.at
survey.aau.at
mooshak.nes.aau.at
www-php1.aau.at
blog.tewi.aau.at
sauron.aau.at
tomwinkler.nes.aau.at
www.edu.aau.at
aesn-api.aau.at
bbb.aau.at
crosmos.nes.aau.at
www.aau.at

Certificate

The complete raw certificate details for aspis.aau.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGXzCCBUegAwIBAgISBGjF/WdHXh4JRPeNuQmyxxQFMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA0MTEwOTM5NDBaFw0yMzA3MTAwOTM5MzlaMBcxFTATBgNVBAMT
DGFzcGlzLmFhdS5hdDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANHm
tDSjDF+CIxL3pgxrJ+7z7i3duLzenqux8X2bS5X8opSSi0EL9gKFlZemnGREjvxQ
M1tMDP/UQ4HxaTAO501qLFSxr5lBQ9YgHMpV2GSZHZbau3U54+RBBa3JI6chWQtf
Arjpc4i6rJX9KDiIewnvvBCZrV/BgGPyIYg8ITopEgk25u+sbLsS55vW49mfhvjz
YoXYLJsOCCSGLPFOyr311w2bynNC9kgQEhHgq0u+bmUEM7mkO+b4Ht+/Ok1guzfI
J0dr2iQbim5zhtXLDzUJer9TvdBf5OxuVGAb6ZkXiRfZIpVcevyxCmJlH66Eohya
EEzhFnIeiiOuS2z+rxozeq9cQG3aIobSJ2y4ZAKy0NQxqKS5RxBVLgQSzR2Mey11
/gYRPuvkpGQC9SDS0ImdU4xif7SW5U/Kj5SI5knC5og24orEFrT2KNY6kBNC2zsP
9skX1fUpwz8wBt1VPxVDljFurXr8BnuEKxIt1+QosBinHTaomkkDLYSZX0VN3DAH
IEWILHtU3bx+fjy0lIlR2d38TPSDaH/6KlzN5uNaA2sW9bu+eB/Xl8qQx2AhcdEB
aBynSbRC/xuzrT8v4OkUePHXpDWwH9MBaUwOZd/4FaVpcYf72I2TyYnhCgXFJJ81
RS9t3AFyZkTLCr4/Kfo3GVr95M47zaEHtGSXBW9XAgMBAAGjggKIMIIChDAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFGyLru5hmY9TSQR8nw6pCmn5oAU0MB8GA1UdIwQY
MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF
BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v
cjMuaS5sZW5jci5vcmcvMFcGA1UdEQRQME6CDGFzcGlzLmFhdS5hdIITYXNwaXMu
dW5pLWtsdS5hYy5hdIIQd3d3LmFzcGlzLmFhdS5hdIIXd3d3LmFzcGlzLnVuaS1r
bHUuYWMuYXQwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm
BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEE
AdZ5AgQCBIH2BIHzAPEAdgC3Pvsk35xNunXyOcW6WPRsXfxCz3qfNcSeHQmBJe20
mQAAAYdv5l2tAAAEAwBHMEUCIBNia6xWmabJApBBkjs8/K+Gjbbh5oxWAN/jpy5S
kePHAiEAnKlTMDeVMR50v4TgoCOVYkSQMLJK8hqbGiN8kMbZ9GYAdwDoPtDaPvUG
NTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYdv5l22AAAEAwBIMEYCIQCSuv2r
X27Ix4mjXDRp+FXLHjpK5iRPvsCfhvvFz+RMuAIhAKTeLJq5bcOU1L51AMfJvS6N
4HcVC1wmoANPPKbS2o4mMA0GCSqGSIb3DQEBCwUAA4IBAQBb3YbOMei+jC09SQof
qry0jYXEKkhzdzQazK6jso/djt/uy5RqmTGzNVmzchWtel6+j7l8meHJQuR+xo15
qTmBXtPxa3CKtPo6XyuI75NRQtZIRTxhAPywaNBF2w/zHWW2uGFSz4Yx01rGMz89
ug37Q11mqg9sFEMj/7O9wsQno6g3NJWOHGtpgB3ZCh299K3L0D9bTkurVBXBIepP
uMvxu37G5KaU0G+a4LK2TKlwG9O95qeIgN8PQMf1aMbSWHRSrexVj/zG6ZVJLbDP
Zq3tefO7zqT0V8FwNXyVZfNdP7uDPB1Hd3hm43kqL0/SSlRU1pNR5p0uA6++wiZo
f5NU
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 384101683547835941142144756960514382697477
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-11 09:39:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-10 09:39:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aspis.aau.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 856322133310151828815974236335828668361902802490107480017781929483405779897322642362943160011658507522154815950861844525395737378916270109785344490341726684005909333734889188668373458084012721762833100040075336715571418578558896501402334373176758895436072837372475507247439987684495955822429817022893775926853937153343368965479638764623139918121377226751805013025575779805383929541561777262370708921870941040684786183131685281572974365000183622269117270244265833078370977505774582797133962557105399117368913039359111993421489556391971326469421416951205822896927128283118362458467083787435897294590730577076031404319048521991169201495177860540238513262098337892755486235225656969673227254503254430284925864541808575936631893975003476656241153073764562121455737789550347382410574101487804994150574543774828888542038697287065142882970038750382878753942440909876681914687036219172881567801341038373627358047102599921985945000601598528076175436367498436995134200237459156560706936275497844724500469405544514443816563046294590565219596933020295205176801479589720430874912836591758850295662570176950081279843921397164008808276187114127343805021607166248438659584009684896082171842839930396945066324061814133818801022650559823589883043475287
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c8baeee61998f5349047c9f0ea90a69f9a00534
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspis.aau.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspis.uni-klu.ac.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aspis.aau.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aspis.uni-klu.ac.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001876fe65dad0000040300473045022013626bac5699a6c9029041923b3cfcaf868db6e1e68c5600dfe3a72e5291e3c70221009ca953303795311e74bf84e0a0239562449030b24af21a9b1a237c90c6d9f466007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001876fe65db6000004030048304602210092bafdab5f6ec8c789a35c3469f855cb1e3a4ae6244fbec09f86fbc5cfe44cb8022100a4de2c9ab96dc394d4be7500c7c9bd2e8de077150b5c26a0034f3ca6d2da8e26
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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