factfinder-api.planninglabs.nyc

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ec:69:7a:c2:1d:b6:28:66:a0:20:82:12:bf:92:e8:bc:97 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=factfinder-api.planninglabs.nyc

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ec:69:7a:c2:1d:b6:28:66:a0:20:82:12:bf:92:e8:bc:97
Serial Number (int): 341783702725537829667646886506898846694551
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e5:67:f5:48:af:8e:86:76:52:f4:8a:7c:16:b7:5a:0c:8c:62:dc:04
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d7:e7:24:67:0f:8d:59:9e:28:1f:e4:68:4e:90:99:ea:47:33:69:88
Fingerprint (sha256): 3a:1a:2e:e1:ca:98:c0:03:6d:89:04:a5:77:f5:1d:85:64:56:16:98:98:a3:0f:65:74:0a:6e:be:33:6a:64:dc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate factfinder-api.planninglabs.nyc

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for factfinder-api.planninglabs.nyc

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

factfinder-api.planninglabs.nyc

Other certificates including the domain name planninglabs.nyc

(limited to 100 certificates)
maputnik-push.planninglabs.nyc
ui.planninglabs.nyc
layers-api.planninglabs.nyc
factfinder-staging.planninglabs.nyc
zap.planning.nyc.gov
regional-viz.planninglabs.nyc
roadview.planninglabs.nyc
ui.planninglabs.nyc
home-api.planninglabs.nyc
factfinder-staging.planninglabs.nyc
ui.planninglabs.nyc
nyc-factfinder.planninglabs.nyc
lotselector.planninglabs.nyc
search-api.planninglabs.nyc
ideas.planninglabs.nyc
zap-staging-lupp.planninglabs.nyc
zap-api-staging.planninglabs.nyc
ui.planninglabs.nyc
zola-canary.planninglabs.nyc
applicantmaps-api.planninglabs.nyc
search-api.planninglabs.nyc
planninglabs.nyc
search-api.planninglabs.nyc
waterfrontaccess.planning.nyc.gov
applicantmaps-api.planninglabs.nyc
planninglabs.nyc
lucats.planninglabs.nyc
ceqr.app
roadview.planninglabs.nyc
roadview.planninglabs.nyc
waterfrontaccess.planning.nyc.gov
zap-api.planninglabs.nyc
zola-canary.planninglabs.nyc
planninglabs.nyc
applicant-portal-develop.planninglabs.nyc
planninglabs.nyc
zap-api-staging.planninglabs.nyc
factfinder-api.planninglabs.nyc
api.planninglabs.nyc
geosearch.planninglabs.nyc
maputnik-push.planninglabs.nyc
zola-staging.planninglabs.nyc
zap-api.planninglabs.nyc
zola-canary.planninglabs.nyc
ceqr.app
home-api.planninglabs.nyc
waterfront-access.planninglabs.nyc
tiles.planninglabs.nyc
zola.planninglabs.nyc
zap.planning.nyc.gov
applicantmaps-staging.planninglabs.nyc
zap-staging-lupp.planninglabs.nyc
applicantmaps-api.planninglabs.nyc
zap-api-staging.planninglabs.nyc
zap.planning.nyc.gov
factfinder-api.planninglabs.nyc
metroexplorer-staging.planninglabs.nyc
waterfrontaccess.planning.nyc.gov
applicantmaps-staging.planninglabs.nyc
tiles.planninglabs.nyc
tiles.planninglabs.nyc
roadview.planninglabs.nyc
nyc-factfinder.planninglabs.nyc
planninglabs.nyc
nyc-factfinder.planninglabs.nyc
maputnik-push.planninglabs.nyc
planninglabs.nyc
zola-api.planninglabs.nyc
zola.planninglabs.nyc
communityprofiles.planning.nyc.gov
citymap.planninglabs.nyc
ideas.planninglabs.nyc
applicantmaps-api.planninglabs.nyc
layers-api.planninglabs.nyc
planninglabs.nyc
factfinder-api.planninglabs.nyc
zola.planninglabs.nyc
applicantmaps-staging.planninglabs.nyc
geosearch.planninglabs.nyc
roadview.planninglabs.nyc
datacatalog.planninglabs.nyc
tiles.planninglabs.nyc
home-api.planninglabs.nyc
factfinder-staging.planninglabs.nyc
ceqr.app
migration.planninglabs.nyc
home-api.planninglabs.nyc
maputnik-push.planninglabs.nyc
layers-api.planninglabs.nyc
applicantmaps-staging.planninglabs.nyc
home-api.planninglabs.nyc
zola-api.planninglabs.nyc
api.planninglabs.nyc
planninglabs.nyc
applicantmaps-api.planninglabs.nyc
zola-canary.planninglabs.nyc
zap-api.planninglabs.nyc
layers-api-staging.planninglabs.nyc
metroexplorer-staging.planninglabs.nyc
tycs.planning.nyc.gov

Certificate

The complete raw certificate details for factfinder-api.planninglabs.nyc in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGeDCCBWCgAwIBAgISA+xpesIdtihmoCCCEr+S6LyXMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MTQyMzAxMzVaFw0x
OTA4MTIyMzAxMzVaMCoxKDAmBgNVBAMTH2ZhY3RmaW5kZXItYXBpLnBsYW5uaW5n
bGFicy5ueWMwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC6JSF7Vftu
wpqhifUORSfWSxolWnxdcRPzDtgY8NR0uxDzOwD3OqNe4FrhxgYwPjcKetYZo/7T
H77J1wpTen9UeWXWQN7lV2jNQshMb09zXU8ZldXxZQeJcchl4K4rO0ZxESWHeJQQ
oMyAfs7fNbwWNy3LAVnonb8v42D9ex9OqhMLJUBgn3r24YO1QY3PXK7JpVQmedfD
liT0BidnlsBMI3+mA0IdPGeFhJGGlsF2544UTuVW6oeAUTWhiGOtzomr6lb95kUj
Qqqq3WnfNUBuTYbIzCEsPrJQRAkZmyjAC8IlCWf2Mt6Z54VCIzRZsJu40dEaBF1z
Crkcd3ozWSMKgIGBES2NqEO/QjQa5QVrHdpU4TuooR5YKzi2FwGJzzZhSQ4W4nc5
kLve1gSiK3JwSWnnUdJMjwMfbIDmggmi3SawYs0Z3rSa/lZpvSPVCAHYSoH1JUqr
nxbSqWSrdePD16kEHBTckqWWn7Sh2OllSe07yYw8E9BBxxJKgNT/dE7i3r76+AYW
DQHw2GGouqu04k6nVBZwl73/oqf5m02qCpLJzXWEBX7GHrZgjab4mGC8mtb3PJZr
P7JkO8q9h0+XZSMd2IYUVwteKjx5e4AKYCCTKXwy/WLjkY/atLgLggSiqJbgHZmi
QMuW75q/1KJK3PQSOltqL2LPqBMAQxtKsQIDAQABo4ICdjCCAnIwDgYDVR0PAQH/
BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8E
AjAAMB0GA1UdDgQWBBTlZ/VIr46GdlL0inwWt1oMjGLcBDAfBgNVHSMEGDAWgBSo
SmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGG
Imh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKG
I2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCoGA1UdEQQjMCGC
H2ZhY3RmaW5kZXItYXBpLnBsYW5uaW5nbGFicy5ueWMwTAYDVR0gBEUwQzAIBgZn
gQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s
ZXRzZW5jcnlwdC5vcmcwggEGBgorBgEEAdZ5AgQCBIH3BIH0APIAdwB0ftqDMa0z
EJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWq4y1q0AAAEAwBIMEYCIQCAIy+6
73aaTbzfPPRKBWGfsfTiPxxJFmJmbGiJThZe+wIhAPP/DrIbbYQp/ilyvXG8hiaX
OmjzUAfsufYTNjv5Iph5AHcAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH
9HgAAAFquMtapwAABAMASDBGAiEAk8c0SteIdA7qRUUdhDMCw5tHd5S9fI8hW3+D
P5kuheACIQDuVAbCknvpv9TKcw93MQ3eiBp9luOMiqWgLznPTkAvgzANBgkqhkiG
9w0BAQsFAAOCAQEAORDoY4dYjb5VWK9TGJx1SMnfKGZUQea40HFLKsD9seuuOd7l
f8L6m958MFU+9essGup7TZInoASD9HJXkVQnkEY9XJ2fVwJvZYhGK7eN9YOhKLSu
NDbRzslJI8AG1JAjgO152wlo4ZrPnLN1LRMskojFHe9U8yx9lr24iA0eZ3sUOgfd
70I1EHxAavZdJqbBJytw9kZHbtXa+ZH5PZ1NW3qd54O99hj0L9cMHiuYLPvdt2iA
miEZCepEo2nEzBpywE4aHoAgQheY5E+btjnjuI5gi44DUqddMuIJjAnts/rhs2Tk
JbR6sLBJ2Tv59dZwXzI1+MCKC1/uxJTrqpAahg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341783702725537829667646886506898846694551
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-14 23:01:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-12 23:01:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'factfinder-api.planninglabs.nyc'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 759405516963640031176801240370823433950327551138182563263900095606542751740795856575723470544617542851105628953156232131338937099717991562849063410122809689922971439428583542270048777659573434767193099889917267641569349918295027155016168611099847259884259263457953973545028981737411255403211850768788171088326342940578130633680249759484019166825938871738803365727217975161372687867193557850738770094018039041269589165396405032072158028353489065273594265864732686867273449346506818703569483618115877785774709524152226042081554508053107233431122588403067136941790050353897380742566289516710051300021049049666131316211325984154666611728322412306266858284933283854273672915825738976672377655545462196537203129184956505967931398111851586656989084822226750297741740508601703732479436578654573766293266345857439236810912131851053408150412712472959557151080195173891582972021775427636630678415407699635935140685190771213748700964283035697740887686226434680793889900140807223292548550189277003031989596286819136713618306267424582691375429598403440154318997545416562133174987019877543754953222424655523658811126621991711956102577830043909480915542964307343343708370327216580617234048861060625044952890063637728109023335112940025494206242572977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e567f548af8e867652f48a7c16b75a0c8c62dc04
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factfinder-api.planninglabs.nyc'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016ab8cb5ab4000004030048304602210080232fbaef769a4dbcdf3cf44a05619fb1f4e23f1c491662666c68894e165efb022100f3ff0eb21b6d8429fe2972bd71bc8626973a68f35007ecb9f613363bf9229879007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ab8cb5aa7000004030048304602210093c7344ad788740eea45451d843302c39b477794bd7c8f215b7f833f992e85e0022100ee5406c2927be9bfd4ca730f77310dde881a7d96e38c8aa5a02f39cf4e402f83
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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