try.airliquide.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:4c:12:08:fd:cc:83:30:02:a7:5a:eb:5b:4d:c1:64:23:ec was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=try.airliquide.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4c:12:08:fd:cc:83:30:02:a7:5a:eb:5b:4d:c1:64:23:ec
Serial Number (int): 374334576402984082028085735436462827250668
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6c:51:2a:81:1a:8b:53:f1:06:55:fd:cb:e4:c4:b7:2d:a3:f8:e3:b6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3f:95:34:12:47:5d:37:77:51:9c:73:2b:94:2e:82:8d:7b:2f:8d:58
Fingerprint (sha256): 32:5b:e4:e2:c5:7d:8f:6c:16:30:ef:69:21:1d:a5:df:e9:4b:e1:55:4d:51:68:31:ce:8c:41:58:52:44:ff:27

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate try.airliquide.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for try.airliquide.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

try.airliquide.it

Other certificates including the domain name airliquide.it

(limited to 100 certificates)
industria.airliquide.it
www.airliquide.com
myinstallations.airliquide.fr
www.airliquide.com
www.airliquide.com
myinstallations.airliquide.fr
www.airliquide.com
www.airliquide.com
try.airliquide.it
mygas-qa2.airliquide.fr
www.airliquide.com
www.airliquide.com
distributor.airliquide.com
mygas-qa1.airliquide.fr
mixtureguide.airliquide.fr
mygas.airliquide.it
industria.airliquide.it
industria.airliquide.it
mygas-qa3.airliquide.fr
mixtureguide.airliquide.fr
mixtureguide.airliquide.fr
www.airliquide.com
mygas-qa2.airliquide.fr
distributor.airliquide.com
industria.airliquide.it
distributor.airliquide.it
try.airliquide.it
www.airliquide.com
myinstallations.airliquide.fr
myinstallations.airliquide.fr
www.airliquide.com
mygas-qa1.airliquide.fr
myinstallations-pprd.airliquide.fr
mygas-pprd.airliquide.it
www.airliquide.com
www.airliquide.com
www.airliquide.com
www.airliquide.com
www.airliquide.com
www.airliquide.com
mygas-pprd.airliquide.it
myinstallations-pprd.airliquide.fr
mixtureguide.airliquide.fr
www.airliquide.com
mygas.airliquide.it
try.airliquide.it
myinstallations-pprd.airliquide.fr
mygas-qa1.airliquide.fr
mygas-qa4.airliquide.fr
www.airliquide.com
myinstallations-pprd.airliquide.fr
distributor.airliquide.com
mygas.airliquide.it
mixtureguide.airliquide.fr
industria.airliquide.it
mygas-qa1.airliquide.fr
myinstallations.airliquide.fr
www.airliquide.com
myinstallations.airliquide.fr
www.airliquide.com
mygas-qa2.airliquide.fr
www.airliquide.com
mygas.airliquide.it
mygas-qa4.airliquide.fr
industria.airliquide.it
try.airliquide.it
myinstallations.airliquide.fr
industria.airliquide.it
mygas.airliquide.it
distributor.airliquide.com
mygas-qa2.airliquide.fr
industria.airliquide.it
mygas-pprd.airliquide.it
myinstallations-pprd.airliquide.fr
myinstallations.airliquide.fr
mixtureguide.airliquide.fr
mygas-qa3.airliquide.fr
www.airliquide.com
try.airliquide.it
www.airliquide.com
industria.airliquide.it
mixtureguide.airliquide.fr
mygas-qa3.airliquide.fr
mygas-aws.airliquide.com
industri.airliquide.dk
mygas.airliquide.it
try.airliquide.it
mygas-qa3.airliquide.fr
www.airliquide.com
mixtureguide.airliquide.fr
mixtureguide.airliquide.fr
distributor.airliquide.com
try.airliquide.it
www.airliquide.com
industria.airliquide.it
myinstallations.airliquide.fr
www.airliquide.com
mygas-pprd.airliquide.it
www.airliquide.com
try.airliquide.it

Certificate

The complete raw certificate details for try.airliquide.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgISBEwSCP3MgzACp1rrW03BZCPsMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAyMjYwMTQ0NTlaFw0x
OTA1MjcwMTQ0NTlaMBwxGjAYBgNVBAMTEXRyeS5haXJsaXF1aWRlLml0MIICIjAN
BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2/PTXfahMrjHJFbUsbW3rm04lwjZ
hLOHPIhUGdhCFSe9oC6MAPiSNkUy8uda2c20UeRXvuUh3GmicgsPa1oGw6M3H21E
JFabKFDP3UB6L/VPBKIKdNgKPBbxVlXhOocP5idtlXqPkqABXTSiGpbdVCP8PIFD
PimTl7d2JZLFIm+xN0+0NvfB0aV2o3W9J262n/K0Y1jtYvbj/g+YA+t4EdZJVDJz
0z1Ceqx9Cwu5EqE6+G6xMKNCu1VeRjEKNG4/Uh0ZBXzBesBzbL9hjlWJgle3O+EU
KKwDJl+M0/czKYk0RaiTUanj3JCjoG2tFrbiWKVlCyg+GzmlIkPHz67U7IYnq/g2
aoqoILfhO8DkyV8jKhTrsmWkateQ1bEylVi7hcHIVRfXKZ1bt9+JgkxxgDsozvFJ
YLtHBXEpU9EDDeIqRk9TzplMRf0V1OgZJdVxkVlAl/rH2b/IPVGS5+SS+1THEiPt
B/D0IJwwgtb4uQrdxefItP5Qug3RfhxgmLrJad2G3CR+EwmEriu4enQsLhHsd6S0
es6ASgT991J9ZsAhxxDp1ym2Kqvj76qDi+sHX5NvvvWwl37dWZj1gi6/V+1KvhZ8
q/D4foCVmXXRtlSF2sH3herdc0+JugBgVu3jBOBzdmhzjdxEQXbbVbIfsKKKzzhv
1XOOjpWtdRWvryMCAwEAAaOCAmYwggJiMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
bFEqgRqLU/EGVf3L5MS3LaP447YwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl
7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p
bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p
bnQteDMubGV0c2VuY3J5cHQub3JnLzAcBgNVHREEFTATghF0cnkuYWlybGlxdWlk
ZS5pdDBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG
AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkC
BAIEgfUEgfIA8AB2AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAAB
aSew7CgAAAQDAEcwRQIgLD0EFQVPyL+RAIjXzDvUrGwUb8YkOP6Ve14KVGI6b0kC
IQC8QM3s3aD30K5oERj0guMqEdO9OgqWJyDa2/tT24KUVAB2AGPy283oO8wszwty
hCdXazOkjWF3j711pjixx2hUS9iNAAABaSew634AAAQDAEcwRQIhALBN3iuZQBwf
rzzPFErb71lxQfW5DBMKCcjcRFa4eA3fAiBCBBTJs33ZmKWy7KCtyWsY7FIbNzU1
Rjw65OSdq/w85zANBgkqhkiG9w0BAQsFAAOCAQEAIubpbOi52vSGOynAGAHHaSDr
5Wan6iiBqRneVFOY+l1iE9TNjlrBvKIukiUpFCGJ0Pt54XJl1gYQZuXiOGkEqzcq
fxnFNa+9wfGtwDHk2ZLCgqWjeE5iPtBaZ0sGmQwXnlgwm5WxWzpV+8eUiDYNUmUO
5lYBnaZYg4a3IinyBv+CWm0+BFD2NSrRnNy+7hwJcEtfiGTO9zwrCBbmRcFcOe2D
KKRXU+gZrG7sUzEIB9qy2MMYdauvE8et9PTQnSgQ9tI2OPDuXQmP7TGAKd+7QuZJ
EraCr/MLBsK4cMwM2H4sw62+70/V1QX135wgxCH6ZA2kyo63a6cRq4jP/2xh1Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 374334576402984082028085735436462827250668
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-26 01:44:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-27 01:44:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'try.airliquide.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 897327683228145297953931478345199755401999136150816009034452037998970514376690724668210668174778106165969672150109208406579255376279241008037278535729553123809013028274428016906428009800040287929211881999170525158324091107162717432062664105854911140565941801786168387261544593873163128976928615956896254418636908397410122242586977045945144847378116361967399046972460064155814370661068999985476568202802237326111815699628715196219346309882554192024922219602756441621619273408987513639422310525926624972813642682477455503395420482095729705782729808997570359181310226664082821490697409656406268934925156306645559414560509683971808247370155086844274673778072846111234040171470135136749717269363824460339733511758422458438937813832655498258821826991362164423121169524709292869770986044715014586151166418564211863485422797910002902036310864337916369446089103408850336520360173029045131401837585979346105799066135805020342924138846624680967319328037524824829982166410719639989887127506371905001643405524218034237535323461422555251819803357398356256243916302169960884588476435425709548684983087835336094664502819541328057866076728660053716766996941166647887522943245411518831483835842199622859418618221013011716468255735767315270819774443299
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c512a811a8b53f10655fdcbe4c4b72da3f8e3b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try.airliquide.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016927b0ec28000004030047304502202c3d0415054fc8bf910088d7cc3bd4ac6c146fc62438fe957b5e0a54623a6f49022100bc40cdecdda0f7d0ae681118f482e32a11d3bd3a0a962720dadbfb53db82945400760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016927b0eb7e0000040300473045022100b04dde2b99401c1faf3ccf144adbef597141f5b90c130a09c8dc4456b8780ddf0220420414c9b37dd998a5b2eca0adc96b18ec521b373535463c3ae4e49dabfc3ce7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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