aamulehti.ap.richiefi.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:c4:29:e5:74:37:b2:55:b1:ea:1e:ad:7d:d3:fd:78:ec:d1 was issued on by Let's Encrypt.

With 25 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aamulehti.ap.richiefi.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c4:29:e5:74:37:b2:55:b1:ea:1e:ad:7d:d3:fd:78:ec:d1
Serial Number (int): 415200177384524966344131801193643821821137
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d2:7c:f3:76:88:f1:94:66:5a:9a:44:20:d6:8f:94:42:3a:50:8a:a7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fc:e3:f7:aa:ca:2c:58:d8:63:5f:8d:17:62:15:a7:27:64:f1:f3:5b
Fingerprint (sha256): 32:8e:71:8a:6a:63:86:4d:68:b6:22:69:ae:2a:86:92:c9:db:8a:86:9b:49:2b:2c:fb:17:92:bb:60:66:b3:97

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aamulehti.ap.richiefi.net

25

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aamulehti.ap.richiefi.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aamulehti.ap.richiefi.net
iltalehti.ap.richiefi.net
jamsanseutu.ap.richiefi.net
janakkalansanomat.ap.richiefi.net
jokilaakso.ap.richiefi.net
kankaanpaanseutu.ap.richiefi.net
kauppalehti.ap.richiefi.net
kmv-lehti.ap.richiefi.net
lapinkansa.ap.richiefi.net
lehdet.kauppalehti.fi
lounais-lappi.ap.richiefi.net
luoteisvayla.ap.richiefi.net
merikarvialehti.ap.richiefi.net
nakoislehti.il.fi
nokianuutiset.ap.richiefi.net
pohjolansanomat.ap.richiefi.net
rannikkoseutu.ap.richiefi.net
satakunnankansa.ap.richiefi.net
suurkeuruu.ap.richiefi.net
sydansatakunta.ap.richiefi.net
tyrvaansanomat.ap.richiefi.net
uusi-rovaniemi.ap.richiefi.net
vakkasuomensanomat.ap.richiefi.net
valkeakoskensanomat.ap.richiefi.net
vekkari.ap.richiefi.net

Other certificates including the domain name richiefi.net

(limited to 100 certificates)
kaleva.ap.richiefi.net
digi.paivamies.fi
digilehdet.ap.richiefi.net
digilehdet.ap.richiefi.net
aamulehti.ap.richiefi.net
digilehdet.ap.richiefi.net
digi.paivamies.fi
digilehdet.ap.richiefi.net
digilehdet.sanomapaino.fi
*.richie.fi
alasatakunta.ap.richiefi.net
digi.paivamies.fi
kaleva.ap.richiefi.net
digilehdet.ap.richiefi.net
aamulehti.ap.richiefi.net
digi.paivamies.fi
aamulehti.ap.richiefi.net
iijokiseutu.ap.richiefi.net
*.richie.fi
*.richiefi.net
alasatakunta.ap.richiefi.net
digilehdet-tutkimus.ap.richiefi.net
*.rad.richiefi.net
digi.paivamies.fi
aamulehti.ap.richiefi.net
digilehdet-tutkimus.ap.richiefi.net
aller.ap.richiefi.net
aamulehti.ap.richiefi.net
digilehdet.ap.richiefi.net
digilehdet.ap.richiefi.net
kaleva.ap.richiefi.net
aamulehti.ap.richiefi.net
kaleva.ap.richiefi.net
*.richiefi.net
aller.ap.richiefi.net
aller.ap.richiefi.net
aamulehti.ap.richiefi.net
almatalent.ap.richiefi.net
digilehdet.sanomapaino.fi
alasatakunta.ap.richiefi.net
iijokiseutu.ap.richiefi.net
aamulehti.ap.richiefi.net
iijokiseutu.ap.richiefi.net
digilehdet.sanomapaino.fi
*.rad.richiefi.net
digilehdet.ap.richiefi.net
*.richie.fi
alasatakunta.ap.richiefi.net
digi.paivamies.fi
alasatakunta.ap.richiefi.net
*.rad.richiefi.net
aamulehti.ap.richiefi.net
kaleva.ap.richiefi.net
digilehdet.ap.richiefi.net
digilehdet.ap.richiefi.net
aller.ap.richiefi.net
alasatakunta.ap.richiefi.net
aamulehti.ap.richiefi.net
almatalent.ap.richiefi.net
*.rad.richiefi.net
digi.paivamies.fi
kaleva.ap.richiefi.net
aamulehti.ap.richiefi.net
alasatakunta.ap.richiefi.net
digi.paivamies.fi
aller.ap.richiefi.net
digilehdet.ap.richiefi.net
aamulehti.ap.richiefi.net
digilehdet.ap.richiefi.net
almatalent.ap.richiefi.net
alasatakunta.ap.richiefi.net
aller.ap.richiefi.net
aller.ap.richiefi.net
aamulehti.ap.richiefi.net
aller.ap.richiefi.net
*.rad.richiefi.net
digi.paivamies.fi
digilehdet.ap.richiefi.net
digi.paivamies.fi
aamulehti.ap.richiefi.net
aller.ap.richiefi.net
digilehdet.ap.richiefi.net
aamulehti.ap.richiefi.net
*.richie.fi
aamulehti.ap.richiefi.net
digilehdet.ap.richiefi.net
aller.ap.richiefi.net
digilehdet.ap.richiefi.net
aller.ap.richiefi.net
aller.ap.richiefi.net
aamulehti.ap.richiefi.net
aamulehti.ap.richiefi.net
aamulehti.ap.richiefi.net
digilehdet.ap.richiefi.net
aamulehti.ap.richiefi.net
aller.ap.richiefi.net
alasatakunta.ap.richiefi.net
alasatakunta.ap.richiefi.net
kaleva.ap.richiefi.net
digilehdet.sanomapaino.fi

Certificate

The complete raw certificate details for aamulehti.ap.richiefi.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZFbUMF6ZzYx+2HGexJH
kHF6msm/FJ+eDI/Zd0pADr/YexkC3Ay70W7uizSTe8q9EL5oUFturACPmBphwNh1
yvqFvj0LtVsvNtpTND2F1Vcx0JlyZEHmqvbeKKGaOHCNwnMyXc3VPoJ/fMh2YO4e
ibkNMqTvf1tpagSujpDT5wby4loM6FWBk99ccT8gTlY549H9p02JtSlMWyIgP+WL
Fu54Xceq9/06wzFv0sz4xsT1lPLQlg0rrKde+4toedJflyRMvhbOAktK6yWow/xD
UD2SpxoCkDfD3ZWk9cNewnUhD+QRqNCdm0RG+OXR1mmuctVdF1GkGrb8WDMUCpXy
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 415200177384524966344131801193643821821137
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-26 10:52:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-26 10:52:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aamulehti.ap.richiefi.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23425764479454615049845505046483269562305193488545081918165096959149259802424613978881377596511697476294369063831680462706034009034352163692923079439789495618487510957081668884307525613483951118631412150601187813617308466713870117981057283784954668079450668246371439373850437212067064144803549317370456152873661782824081778716394101756034284952806214933987261388613612949571698669198183836595359068860404000755641746704059401487939331460401214231578265153037336156082558633759877582915202557620747664814557650130680552563018449873737727340913223264010919423772638468648103603527797784111329800765569344797069802861079
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d27cf37688f194665a9a4420d68f94423a508aa7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (754 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aamulehti.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iltalehti.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamsanseutu.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'janakkalansanomat.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jokilaakso.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kankaanpaanseutu.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kauppalehti.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kmv-lehti.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lapinkansa.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lehdet.kauppalehti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lounais-lappi.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luoteisvayla.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merikarvialehti.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nakoislehti.il.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nokianuutiset.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pohjolansanomat.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rannikkoseutu.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satakunnankansa.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suurkeuruu.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sydansatakunta.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tyrvaansanomat.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uusi-rovaniemi.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vakkasuomensanomat.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valkeakoskensanomat.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vekkari.ap.richiefi.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000167ea5c4b51000004030047304502207b90bc39f2f7fe8b147887f460b933bdd7427d977f3b79c11476fc39c7e8832a022100f213734a258fcb89f5695a041bd3ad38a6aa61569440567ccd17630327e9409a007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000167ea5c4b3b0000040300483046022100ca74461d48566e393b9d7675c1c23fe10f41ada9017c8f135db01777c6cb6323022100c1908b3e93968060456d3eb4c4d43e8a7fee0d5b02c95479b6ac02ce6f060b14
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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