watsonc.mapcentia.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:86:96:4d:93:69:7d:d0:33:4d:1c:f0:ac:da:50:e5:2e:ee was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=watsonc.mapcentia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:86:96:4d:93:69:7d:d0:33:4d:1c:f0:ac:da:50:e5:2e:ee
Serial Number (int): 394246767890544691379105394333982654803694
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6e:e7:2b:5d:f3:e7:82:27:38:d0:26:1a:af:50:c8:42:87:6b:0d:ff
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ec:af:3f:b2:a4:7c:30:ba:92:2e:e6:8b:42:86:0e:9d:9d:c9:f9:71
Fingerprint (sha256): 38:68:c0:a5:b4:38:22:b4:85:da:28:61:9f:71:b8:9c:76:35:f5:e4:91:a6:31:bc:14:c0:58:ce:60:c7:0f:29

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate watsonc.mapcentia.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for watsonc.mapcentia.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gc2.watsonc.dk
watsonc.mapcentia.com

Other certificates including the domain name mapcentia.com

(limited to 100 certificates)
drayton.mapcentia.com
vidi-furesoe.mapcentia.com
cowi-vidi.mapcentia.com
geofyn.mapcentia.com
vidi-dragoer.mapcentia.com
geofyn.mapcentia.com
odder.mapcentia.com
vidi.mapcentia.com
eu1.mapcentia.com
rm.mapcentia.com
watsonc.mapcentia.com
geofyn.mapcentia.com
*.mapcentia.com
fkg.mapcentia.com
vidi-furesoe.mapcentia.com
assens.mapcentia.com
dragoer.mapcentia.com
geofyn.mapcentia.com
drayton.mapcentia.com
cowi-konflikt.mapcentia.com
ballerup-vidi.mapcentia.com
naturparklillebaelt-vidi.mapcentia.com
naturparklillebaelt-vidi.mapcentia.com
vidi-dragoer.mapcentia.com
vidi-furesoe.mapcentia.com
blog.mapcentia.com
dragoer.mapcentia.com
assens.mapcentia.com
furesoe.mapcentia.com
ballerup-vidi.mapcentia.com
geofyn.mapcentia.com
cowi.mapcentia.com
drayton.mapcentia.com
rm-vidi.mapcentia.com
rm.mapcentia.com
vidi-geokon.mapcentia.com
odder-vidi.mapcentia.com
*.mapcentia.com
odder-vidi.mapcentia.com
ballerup.mapcentia.com
drayton.mapcentia.com
cowi-vidi.mapcentia.com
vidi.mapcentia.com
furesoe.mapcentia.com
ballerup.mapcentia.com
eu1.mapcentia.com
assens.mapcentia.com
furesoe.mapcentia.com
cowi.mapcentia.com
rm.mapcentia.com
vidi-furesoe.mapcentia.com
vidi-dragoer.mapcentia.com
watsonc.mapcentia.com
geofyn.mapcentia.com
assens-vidi.mapcentia.com
cowi-konflikt.mapcentia.com
cowi-vidi.mapcentia.com
naturparklillebaelt-vidi.mapcentia.com
assens.mapcentia.com
geofyn.mapcentia.com
cowi.mapcentia.com
fkg-kort.mapcentia.com
eu1.mapcentia.com
gc2.mapcentia.com
furesoe.mapcentia.com
cowi.mapcentia.com
rm.mapcentia.com
gc2.mapcentia.com
assens.mapcentia.com
assens.mapcentia.com
drayton.mapcentia.com
vidi.mapcentia.com
furesoe.mapcentia.com
cowi.mapcentia.com
cowi-konflikt.mapcentia.com
vidi-geokon.mapcentia.com
odder-vidi.mapcentia.com
*.mapcentia.com
vidi-geokon.mapcentia.com
dragoer.mapcentia.com
cowi.mapcentia.com
vidi-dragoer.mapcentia.com
cowi-konflikt.mapcentia.com
cowi-vidi.mapcentia.com
gc2.mapcentia.com
eu1.mapcentia.com
vidi-furesoe.mapcentia.com
rm.mapcentia.com
fkg-kort.mapcentia.com
assens-vidi.mapcentia.com
fkg-kort.mapcentia.com
odder.mapcentia.com
furesoe.mapcentia.com
vidi.mapcentia.com
fkg.mapcentia.com
geofyn.mapcentia.com
vidi-geokon.mapcentia.com
watsonc.mapcentia.com
cowi.mapcentia.com
ballerup-vidi.mapcentia.com

Certificate

The complete raw certificate details for watsonc.mapcentia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGcDCCBVigAwIBAgISBIaWTZNpfdAzTRzwrNpQ5S7uMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMjcxMzI4MThaFw0y
MDA0MjYxMzI4MThaMCAxHjAcBgNVBAMTFXdhdHNvbmMubWFwY2VudGlhLmNvbTCC
AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMzrFtVd3zA9JagkQ6G2Yqxo
M0iRSoXzoYTFAtMU8fGlpqn+e4oUXSFOa+QdbrXUMHOi1SW92ryVsuSg6LYSt30D
q69APj/PnFy5QIG1kkhvJCjtuqN4S6cw2rL0HP8ysTTquPt1zkHpG03fHHGAxsiu
/I4hR0JFDfWhIa2BURL5Ezt6D6np4PEQphgN+74geJfStjEqSYl3Nrj9GRpj2vFF
rJ+VniBOqYNgYvvmj3Wu09hrGDEMSl+/7WdaZa52BZr53rqLxxfDCeKL8d+t/LYK
7knGkq6ncK6mY8ZFJNZLxm8Uo/g8gTqMU+9x8Dk8nUbRJu2zYXTxIHc7ms735Rot
1vnKvXKCXKGWEAoSFc8EyP6udrxQ/7nxgKhbQT/zjF5RqB2nfQB3S5vvmWkdEniH
lQ6sCRT5CJ679jmuVpNNCQJe9PWq2YeUEF72taoJMqgnQee964qPrvNjm1b2XxDe
f2nx+ctlOuxugL/pD0w5fosXrf4MP28u+pHaXR1ciDGJmQLblK/hEnXq64YHw+o5
fqLLJefWFZ84z9CSBUSCuP2lwCocJ7GHPn2Sx7/THqaoXyKdk7uEDvJUYzvcfum7
6EeHffn288YDIGrDe2puAdnk37pLhTwV2JtCP1xUwyFpyOH8Vq22xhRm+lmoe75Z
t0HTz36aLQdCr9MbeB8PAgMBAAGjggJ4MIICdDAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O
BBYEFG7nK13z54InONAmGq9QyEKHaw3/MB8GA1UdIwQYMBaAFKhKamMEfd265tE5
t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29j
c3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2Nl
cnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wMAYDVR0RBCkwJ4IOZ2MyLndhdHNv
bmMuZGuCFXdhdHNvbmMubWFwY2VudGlhLmNvbTBMBgNVHSAERTBDMAgGBmeBDAEC
ATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNl
bmNyeXB0Lm9yZzCCAQIGCisGAQQB1nkCBAIEgfMEgfAA7gB1APCVpFnyANGCQBAt
L5OIjq1L/h1H45nh0DSmsKiqjrJzAAABb+dnN2oAAAQDAEYwRAIgOWat/4Oix+St
uvD7YH+sAE9A91UwiNQRk4Mis7zKTAsCIAKe2nG9ABh/pW6+dUnYdquLNUZs14Cx
FpIZzyp9V2/yAHUAB7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFv
52c3mQAABAMARjBEAiArwwge8qW8VcuuNurQsNIiGXVhWxpffmdjWvKl+E9hJwIg
aWj9SaHwYl9XU0/ihHbnV3KASWmDifxF4JVa0TMFjqQwDQYJKoZIhvcNAQELBQAD
ggEBADSfmeDXVVsrrhpmHARhVtpEf7CYnW/ZIf7AZO5UOn/qUcyHjdwOMlWg55e9
9H7DjALMYL0MSd6A1G+kXVC+077oUYtEBe7zBNct9N28PAVCkQ3VDQomRDl8Ctae
QrfRIuItqNUuq5FxrMsgW4vVxrW91mWbFrFHSNPvxQ8erUnpnBJHSy/1MP495bXT
zhgTFiuXicvEpkxWxXlOKVOPbd1g9WaQC67DIyjK4h1yrMQSB7cbjoCy4lkmy1sO
dtW7EcubvENCmbMNT7K3or7ez8nVTD5v3dkRhurnnFndn6AIeX8TTEAcDbNzs/kg
GjVDW3C8DrMYckDJ36cHvngpHrs=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 394246767890544691379105394333982654803694
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-27 13:28:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-26 13:28:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'watsonc.mapcentia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 835993797034560834824963988962699487965724247391478514370383866279910591695836250093123507377012724106394115266000298128536470510753444998584201460042218954037907961700143060773962618511078069247918025062959086841470829337122807746281531128277188246814962263143347952954521162961556755129250687247520710171374143014409887116861438267826827028133756022107848641674574134946173632507212014401792042199343525118736095204375200460580442888308432408791669528402951764698296064572146777071020060687348593824298850521534478967532331390422258566918681718660978391596275600516732503099854096754086785612286707568023253926765321179638476894027868494401658823232162513878170388815546206420999918984038355555214688134310013289947673940658237096575717150921046871713607626491672163403023315288925714759742508682322705098762853561779241952741180142317182742548111146583498958144943570841988195986407875838602451210178681331916162758184511875460060056393262740457634782547538213133899436022530061658861918027015835254645317229239183884656215415470239307918457681349589375830866156995382663751865375702309096768086052662245035309876965041626811446267253948491455034216855323680260036583506785558140574199940458173326536602903615661521065344788602639
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6ee72b5df3e7822738d0261aaf50c842876b0dff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gc2.watsonc.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watsonc.mapcentia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016fe767376a000004030046304402203966adff83a2c7e4adbaf0fb607fac004f40f7553088d411938322b3bcca4c0b0220029eda71bd00187fa56ebe7549d876ab8b35466cd780b1169219cf2a7d576ff200750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fe7673799000004030046304402202bc3081ef2a5bc55cbae36ead0b0d2221975615b1a5f7e67635af2a5f84f612702206968fd49a1f0625f57534fe28476e757728049698389fc45e0955ad133058ea4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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