opengrok.libreoffice.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:b2:d7:eb:71:8f:ba:9a:f0:ba:1b:fc:60:b2:9b:94:54:4b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=opengrok.libreoffice.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b2:d7:eb:71:8f:ba:9a:f0:ba:1b:fc:60:b2:9b:94:54:4b
Serial Number (int): 409306411551123209655525917214653138883659
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ff:12:2b:33:dc:e3:dc:8f:84:79:84:08:00:04:e7:68:78:01:08:6f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 46:41:0a:a6:7e:05:62:f6:9d:46:a7:77:4b:14:0a:b3:7f:43:e9:15
Fingerprint (sha256): 36:3e:ff:1c:c2:d3:e2:2f:fb:4c:48:9e:5d:fa:19:ab:19:ed:73:a2:95:53:5d:1b:25:6c:f7:8d:c2:db:48:d5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate opengrok.libreoffice.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for opengrok.libreoffice.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

opengrok.libreoffice.org

Other certificates including the domain name libreoffice.org

(limited to 100 certificates)
extensions.libreoffice.org
bugs.documentfoundation.org
newdesign.libreoffice.org
devcentral.libreoffice.org
dev-www.libreoffice.org
bugs.documentfoundation.org
survey.documentfoundation.org
devcentral.libreoffice.org
survey.documentfoundation.org
bibisect.libreoffice.org
crashreport.libreoffice.org
crashreport.libreoffice.org
hub.libreoffice.org
help.libreoffice.org
docs.libreoffice.org
help.libreoffice.org
opengrok.libreoffice.org
opengrok.libreoffice.org
api.libreoffice.org
ask.libreoffice.org
update.libreoffice.org
dev-downloads.libreoffice.org
opengrok.libreoffice.org
listarchives.documentfoundation.org
vm222.documentfoundation.org
libreoffice.org
wasm-test.libreoffice.org
hub.libreoffice.org
api.libreoffice.org
newdesign.libreoffice.org
translations.documentfoundation.org
manual-test.libreoffice.org
docs.libreoffice.org
downloadcounter.libreoffice.org
update.libreoffice.org
devcentral.libreoffice.org
docs.libreoffice.org
jenkins.libreoffice.org
devcentral.libreoffice.org
libreoffice.org
translations.documentfoundation.org
devcentral.libreoffice.org
docs.libreoffice.org
helponline.libreoffice.org
wasm-test.libreoffice.org
extensions.libreoffice.org
gerrit.libreoffice.org
jenkins.libreoffice.org
hub.libreoffice.org
help.libreoffice.org
crashreport.libreoffice.org
newdesign.libreoffice.org
newdesign.libreoffice.org
listarchives.documentfoundation.org
dev-downloads.libreoffice.org
ask.libreoffice.org
devcentral.libreoffice.org
update.libreoffice.org
translations.documentfoundation.org
stats.documentfoundation.org
devcentral.libreoffice.org
books.libreoffice.org
survey.documentfoundation.org
gerrit.libreoffice.org
perf.libreoffice.org
docs.libreoffice.org
extensions.libreoffice.org
gerrit.libreoffice.org
gerrit.libreoffice.org
hub.libreoffice.org
docs.libreoffice.org
crashreport.libreoffice.org
registration.libreoffice.org
stats.documentfoundation.org
jenkins.libreoffice.org
dev-www.libreoffice.org
dev-www.libreoffice.org
hub.libreoffice.org
crashreport.libreoffice.org
crashreport.libreoffice.org
translations.documentfoundation.org
update.libreoffice.org
bugs.documentfoundation.org
update.libreoffice.org
manual-test.libreoffice.org
help.libreoffice.org
hub.libreoffice.org
manual-test.libreoffice.org
translations.documentfoundation.org
dev-downloads.libreoffice.org
books.libreoffice.org
survey.documentfoundation.org
newdesign.libreoffice.org
docs.libreoffice.org
api.libreoffice.org
helponline.libreoffice.org
perf.libreoffice.org
gerrit.libreoffice.org
bugs.documentfoundation.org
wasm-test.libreoffice.org

Certificate

The complete raw certificate details for opengrok.libreoffice.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgISBLLX63GPuprwuhv8YLKblFRLMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMzEwMjA3MDdaFw0x
OTA1MDEwMjA3MDdaMCMxITAfBgNVBAMTGG9wZW5ncm9rLmxpYnJlb2ZmaWNlLm9y
ZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAL5rp+jB9KR/ZaByoH0i
SlxP4HHHUu5Ap+oQ5hjwXQ7eNSTuf4piMLqh4vgtRS1MCwySdFn2Wsgu47UF1iry
QpIb8u54fx1q0LuX4i590p0DR4ID38fQrcGgFReRqdX2QJ/ab1KVie+2mZflNNur
QxBrCZ9hKpIcbiquQ2dRm8go03narZ6dEx1VSuA1lXsleclQwYNAHXxfxFYvv+fL
/Cbhycl8aAJFSy92NO9YqD+TSkKUNt93mJsypwefrwRX9aeMWy+ol6x6HnYYNSA9
5C/bKhYN/FkGMkAiZzD4zaS09R8naWP+JMXSnFswjJMVglfDgswRhy1+YB4G1gcA
HfXHQzKf9vC/UM900wQZ2O+hsahfJmknKUAI6V+WQTAbM509TSwQ4i4SZU+lHw+c
JOcfSSXZhdEZUwo0cBQlo9+Xo944V8tOKFaPJwQaN+snR/MwnHxOcNxtQ3xqkhMq
NoKxNqOYXwwOpCyyKDFgeMpTiDbrhMrSRzo6zmW7QB+ZsrQerv8IBxFUSCFRkTZd
y9DK2FUWXJd/76a1Ingj2rxtQEkzIaFA7s0Jd/Msf7DZWnjISnws6hr2ZUnU1kBk
rKgbT1kUkfnyc+unrHOGMFR9ZWiPvcJ5hM+Pr0sIsKwxm3+L57syOZC7GN1bUCZT
GH4vioKUh5GbSUDfzeLVGfTlAgMBAAGjggJsMIICaDAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD
VR0OBBYEFP8SKzPc49yPhHmECAAE52h4AQhvMB8GA1UdIwQYMBaAFKhKamMEfd26
5tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDov
L29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDov
L2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wIwYDVR0RBBwwGoIYb3Blbmdy
b2subGlicmVvZmZpY2Uub3JnMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQB
gt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn
MIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAVYHUwhaQNgFK6gubVzxT8MDkOHhw
JQgXL6OqHQcT0wwAAAFood/XBgAABAMARjBEAiA5KLqG9TfQ/Yiu4UmO0EPa11z5
5YqB4thy5/8ByGoCQQIgIkuUWsBH6ExNZGO+WkO+WOH8EemndP5620YyofptJ+cA
dgApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWih39i4AAAEAwBH
MEUCIDizpiKtGTeTJLe1wff2NnxgttEyqzysQaiei5axWFJIAiEAtp0nniO1cFOd
InSk5OpnnwxIdgjMKQXwly1K1dIuUX8wDQYJKoZIhvcNAQELBQADggEBAAH8B3JR
VcLqpBn4jKUAIxmP1Th1/IfBzIfsDgohBSd7mxrf0AVBhCKQ+kgPz2m/qFtC13/v
+sMmSilaUNCaFIrU3I6lWb59wft0kghgi4ugJXbZfMKqjaGkbCHHAYvmFtS96KSU
aeGIFsByuf/CHJxXf9Dq+g/FTQQk1IdZAV6PqJpHx0t0Gys4Y5ek1aNkS4sl5k7m
DyCZuwO0QJd9Pb1ppdwgcNy6r87wxLPwzosJV3pCJXRgGmbw3VclaNc1dQQL5UEG
G0vu4SuIr9Mt3iDX+s5s7UxQRJb0bVdrDoKA9SJLAvPmOJuCH0mzqCO/pkan2M09
htfzCzZf1QI2RMc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 409306411551123209655525917214653138883659
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-31 02:07:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-01 02:07:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'opengrok.libreoffice.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 776847989075585366778004418289693960483961906370954724963961584239627016843937407278835759896160750508175507688055898617058330388632553958967725539706362209556369979567185191132444707569952346242966562295950638846789948573802722328300559304492784921562340410117799644089880253183071093131237992600199021998794608860047909958023654918653253937509649181093084009686189904479657574396733398719136571232672677247148515977137315673203532318177222471120907481875718635193621135529404530267551393815359262085357386792815885201710842578876517510206185649894084807292445671953329052205297626705513968072109440371107604080714542427946672409529801518988369294455909577944743991044569775137838300006913600982261930276711541646278235057311583979424482461850506010330608782867897404732196488103235522932911344720349327528546092331481668338025772533464578090534240139631953818027674476481441266130209226755711306492478740181673850378285767383609033080917074056625838945809463252415383296960043474217614711107844739903322291079560519959114959905929155168678477654580427782681135866923869898195520210615789604195829497533583062402296235926626765576972065535147606629972097298266208099655912183268433467227343217562123155906099352063515985299742782693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff122b33dce3dc8f847984080004e7687801086f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opengrok.libreoffice.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000168a1dfd706000004030046304402203928ba86f537d0fd88aee1498ed043dad75cf9e58a81e2d872e7ff01c86a02410220224b945ac047e84c4d6463be5a43be58e1fc11e9a774fe7adb4632a1fa6d27e7007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168a1dfd8b80000040300473045022038b3a622ad19379324b7b5c1f7f6367c60b6d132ab3cac41a89e8b96b1585248022100b69d279e23b570539d2274a4e4ea679f0c487608cc2905f0972d4ad5d22e517f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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