llorenteycuenca.com

- Cloudflare, Inc. -

Issued by CloudFlare Inc RSA CA-1

About this certificate

This digital certificate with serial number 02:32:60:2d:23:e7:54:39:af:77:f7:51:4e:76:de:0e was issued on by CloudFlare, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Cloudflare, Inc.

Organization: Cloudflare, Inc.
State / Province: CA
Locality: San Francisco
Country: US

CloudFlare, Inc.

Organization: CloudFlare, Inc.
State / Province: CA
Locality: San Francisco
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:32:60:2d:23:e7:54:39:af:77:f7:51:4e:76:de:0e
Serial Number (int): 2920021522197471780460905986436554254
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 14:fb:fa:9c:8e:40:49:7c:4e:18:0e:0f:31:7b:b0:fc:ce:cb:33:88
AuthorityKeyId: 91:05:8a:df:4c:22:c6:6d:8b:94:4c:16:45:7e:ee:6f:02:fb:b7:c0

Fingerprint (sha1): ae:97:3b:26:fc:cc:6d:6e:ea:d7:b6:c1:ca:67:7d:b5:b8:42:6c:19
Fingerprint (sha256): 47:dd:47:22:42:af:c7:d2:ad:b6:70:a3:b9:f3:cc:67:12:be:63:ea:97:f4:13:ff:56:51:07:58:ce:be:52:f9

Issuing Certificate URL: http://cacerts.digicert.com/CloudFlareIncRSACA-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/CloudFlareIncRSACA1.crl
CRL Distribution Point: http://crl4.digicert.com/CloudFlareIncRSACA1.crl

Check the revocation status for certificate llorenteycuenca.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for llorenteycuenca.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

llorenteycuenca.com
*.llorenteycuenca.com

Other certificates including the domain name llorenteycuenca.com

(limited to 100 certificates)
sni35932.cloudflaressl.com
ssl387379.cloudflaressl.com
sni35932.cloudflaressl.com
llorenteycuenca.com
sni35932.cloudflaressl.com
sni35932.cloudflaressl.com
sni35932.cloudflaressl.com
sni35932.cloudflaressl.com
sni35932.cloudflaressl.com
sni35932.cloudflaressl.com
llorenteycuenca.com
ithelp.visionrt.com
sni35932.cloudflaressl.com
sni35932.cloudflaressl.com
digitalexperiencelp.llorenteycuenca.com
ssl387379.cloudflaressl.com
digitalexperiencelp.llorenteycuenca.com
itdesk.mkspamp.com
support.erm.com
it.littlegarth.org
sni35932.cloudflaressl.com
itservicedesk.poundland.co.uk
sni35932.cloudflaressl.com
sni35932.cloudflaressl.com
llorenteycuenca.com
support.erm.com
ssl387379.cloudflaressl.com
sni35932.cloudflaressl.com
support.sodra.com
ithelp.visionrt.com
sni35932.cloudflaressl.com
sni35932.cloudflaressl.com
sni35932.cloudflaressl.com
helpdesk.troax.com
sni35932.cloudflaressl.com
sni35932.cloudflaressl.com
sni35932.cloudflaressl.com
sni35932.cloudflaressl.com
sni35932.cloudflaressl.com
sni35932.cloudflaressl.com
sni35932.cloudflaressl.com
sni35932.cloudflaressl.com
soporte.llorenteycuenca.com
sni35932.cloudflaressl.com
sni35932.cloudflaressl.com
sni35932.cloudflaressl.com
sni35932.cloudflaressl.com
sni35932.cloudflaressl.com
llorenteycuenca.com
vpn1.llorenteycuenca.com
sni35932.cloudflaressl.com
ssl387379.cloudflaressl.com
llorenteycuenca.com
sni35932.cloudflaressl.com
atspt.llorenteycuenca.com
llorenteycuenca.com
sni35932.cloudflaressl.com
sni35932.cloudflaressl.com
sni35932.cloudflaressl.com
llorenteycuenca.com
itservicedesk.poundland.co.uk
helpdesk.acrotec.ch
sni35932.cloudflaressl.com
ideasplus.llorenteycuenca.com
sni35932.cloudflaressl.com
sni35932.cloudflaressl.com
sni35932.cloudflaressl.com
support.erm.com
atsbr.llorenteycuenca.com
atsen.llorenteycuenca.com
itservicedesk.poundland.co.uk
sni35932.cloudflaressl.com
ssl387379.cloudflaressl.com
ideasplus.llorenteycuenca.com
ssl387379.cloudflaressl.com
llorenteycuenca.com
servicedesk.hermesairports.com
ssl387379.cloudflaressl.com
sni35932.cloudflaressl.com
sni35932.cloudflaressl.com
sni35932.cloudflaressl.com
sni35932.cloudflaressl.com
helpdesk.fast.eu
sni35932.cloudflaressl.com
sni35932.cloudflaressl.com
llorenteycuenca.com
it.littlegarth.org
servicedesk.ecm.software
sni35932.cloudflaressl.com
it.littlegarth.org
sni35932.cloudflaressl.com
helpdesk.acrotec.ch
sni35932.cloudflaressl.com
sni35932.cloudflaressl.com
sni35932.cloudflaressl.com
sni35932.cloudflaressl.com
soporte.llorenteycuenca.com
medialist.llorenteycuenca.com
sni35932.cloudflaressl.com
sni35932.cloudflaressl.com

Certificate

The complete raw certificate details for llorenteycuenca.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsikVrZPVweRNgG1RprCz
M1vrJaN890QhZDKgX194d6uWQs1UNIWxNPprL/2TLUJoaIlBqhTIwbijVC7Qvl8y
1th8Wt9Plti3w9eteiVL78HKNwf1NiZC+eXXa+QqwVv4d5jYAWYAECmtYwe0SbMh
h4dbePOSX1EJMfSHYbCJM+s1wefw6WkYo+VtRJAEzrzBOhC2jUPE5upUHqlEoIvf
wo1ef5uLFkrOJ+GTi/boip87LXmBXYekU4DFDYVse0OF26PKxrFgyWj6dnS8+M6/
Zz/HTcNtRDOBCVnt/fvMxqWrdCS6U7VL1RO6iULZ5XbTkAKxZjdGn9U2QVll5tif
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2920021522197471780460905986436554254
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare Inc RSA CA-1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cloudflare, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'llorenteycuenca.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22490677894669704588890438398710942309512546892985045987503299791868466851868678055629231923694379157142022863043855670469118301151345307354891623817445123328253946160879521157826715528090644090958195273467302646984462739444359903326005322370650188194644978554319120633749710144885554693475163311245582033760107735724728031243090216866122377477584626414251920191912928174672440301801696567611170281913416404653695005143470299071930398676276864696356580739744720178724193299896014641671663259559704376013037557476038109413762820124503484537938117057304000955203052071504159251302185243257711899547679031095551441018861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 91058adf4c22c66d8b944c16457eee6f02fbb7c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							14fbfa9c8e40497c4e180e0f317bb0fccecb3388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llorenteycuenca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.llorenteycuenca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/CloudFlareIncRSACA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/CloudFlareIncRSACA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/CloudFlareIncRSACA-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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