manifiesto.funcionpublica.gob.mx

- Secretaria De La Funcion Publica -

Issued by AffirmTrust Certificate Authority - OV1

About this certificate

This digital certificate with serial number 87:88:2a:0a:cd:9e:43:ed:00:00:00:00:58:08:bd:18 was issued on by AffirmTrust.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Secretaria De La Funcion Publica

Organization: Secretaria De La Funcion Publica
State / Province: Ciudad De Mexico
Locality: Ciudad De Mexico
Country: MX

AffirmTrust

Organization: AffirmTrust
Organization unit: See www.affirmtrust.com/repository
Country: CA

This certificate has expire since

Certificate Details

Serial Number (hex): 87:88:2a:0a:cd:9e:43:ed:00:00:00:00:58:08:bd:18
Serial Number (int): 180152784520845115975602830593667677464
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: dd:37:a9:ad:c2:c5:c1:d1:ff:77:7e:01:fb:44:fa:3f:da:97:27:dc
AuthorityKeyId: fe:60:c3:0d:a4:a2:9d:21:4f:7a:78:4c:62:c5:db:14:fc:39:78:c4

Fingerprint (sha1): 4f:27:5e:5d:e8:d0:52:02:ca:5e:c1:b1:c1:9c:2f:5b:96:bb:20:d1
Fingerprint (sha256): 4e:ba:46:c8:45:c1:9e:70:2e:09:31:06:68:e2:2e:a7:bb:b6:2c:83:75:8e:c0:00:cb:d9:fb:12:09:96:63:e0

Issuing Certificate URL: http://aia.affirmtrust.com/aftov1ca.crt

Revocation information

OCSP Server: http://ocsp.affirmtrust.com
CRL Distribution Point: http://crl.affirmtrust.com/crl/aftov1ca.crl

Check the revocation status for certificate manifiesto.funcionpublica.gob.mx

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for manifiesto.funcionpublica.gob.mx

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

manifiesto.funcionpublica.gob.mx

Other certificates including the domain name funcionpublica.gob.mx

(limited to 100 certificates)
alertadorescontralacorrupcion.funcionpublica.gob.mx
le-507.dkla8s.funcionpublica.gob.mx
www01.funcionpublica.gob.mx
le-166.k8s.funcionpublica.gob.mx
le-166.apps.funcionpublica.gob.mx
controlinterno.funcionpublica.gob.mx
le-430.apps.funcionpublica.gob.mx
compranet.funcionpublica.gob.mx
storage.apps.funcionpublica.gob.mx
funcionpublica.gob.mx
le-232.k8s.funcionpublica.gob.mx
siac.funcionpublica.gob.mx
aga-gobierno-abierto.k8s.funcionpublica.gob.mx
sipmg.funcionpublica.gob.mx
genero.funcionpublica.gob.mx
cnet.funcionpublica.gob.mx
*.funcionpublica.gob.mx
le-358.dkla8s.funcionpublica.gob.mx
le-213.k8s.funcionpublica.gob.mx
sidec.funcionpublica.gob.mx
compras.funcionpublica.gob.mx
le-253.k8s.funcionpublica.gob.mx
le-322.k8s.funcionpublica.gob.mx
ssecoe.funcionpublica.gob.mx
alertadorescontralacorrupcion.funcionpublica.gob.mx
le-322.k8s.funcionpublica.gob.mx
cdn.k8s.funcionpublica.gob.mx
storage.apps.funcionpublica.gob.mx
storage.apps.funcionpublica.gob.mx
le-725.apps.funcionpublica.gob.mx
funcionpublica.gob.mx
le-325.k8s.funcionpublica.gob.mx
funcionpublica.gob.mx
le-299.k8s.funcionpublica.gob.mx
directoriosancionados.funcionpublica.gob.mx
siac.funcionpublica.gob.mx
le-166.apps.funcionpublica.gob.mx
convenciones.funcionpublica.gob.mx
declaranet.gob.mx
le-70.200.34.175.120.nip.io
le-213.k8s.funcionpublica.gob.mx
capacita.funcionpublica.gob.mx
le.k8s.funcionpublica.gob.mx
sideof.funcionpublica.gob.mx
correo.funcionpublica.gob.mx
compranet-test.funcionpublica.gob.mx
onboarding.capacitacion.apps.funcionpublica.gob.mx
capacita.funcionpublica.gob.mx
le-322.k8s.funcionpublica.gob.mx
compranet.funcionpublica.gob.mx
sidec.funcionpublica.gob.mx
le-70.200.34.175.120.nip.io
manifiesto.funcionpublica.gob.mx
le-1304.k8s.funcionpublica.gob.mx
compranet.funcionpublica.gob.mx
alertadores.funcionpublica.gob.mx
le-495.k8s.funcionpublica.gob.mx
le-1304.k8s.funcionpublica.gob.mx
le-322.k8s.funcionpublica.gob.mx
dns1.funcionpublica.gob.mx
siippg.funcionpublica.gob.mx
le-228.k8s.funcionpublica.gob.mx
sideof.funcionpublica.gob.mx
gitlab.funcionpublica.gob.mx
sonar.apps.funcionpublica.gob.mx
manifiesto.funcionpublica.gob.mx
le.k8s.funcionpublica.gob.mx
le-449.k8s.funcionpublica.gob.mx
le.k8s.funcionpublica.gob.mx
sfp-sharepoint.funcionpublica.gob.mx
le.k8s.funcionpublica.gob.mx
le-253.k8s.funcionpublica.gob.mx
servicios.apps.funcionpublica.gob.mx
le-36.200.34.175.120.nip.io
siippg.funcionpublica.gob.mx
cnet.funcionpublica.gob.mx
le-325.k8s.funcionpublica.gob.mx
funcionpublica.gob.mx
le-549.k8s.funcionpublica.gob.mx
capacita.funcionpublica.gob.mx
datosabiertos.funcionpublica.gob.mx
le-495.k8s.funcionpublica.gob.mx
siippg.funcionpublica.gob.mx
le-238.k8s.funcionpublica.gob.mx
storage.apps.funcionpublica.gob.mx
le-358.dkla8s.funcionpublica.gob.mx
le-299.k8s.funcionpublica.gob.mx
le-70.200.34.175.120.nip.io
siac.funcionpublica.gob.mx
cdn.k8s.funcionpublica.gob.mx
*.funcionpublica.gob.mx
le-400.k8s.funcionpublica.gob.mx
funcionpublica.gob.mx
sfpbpm01.funcionpublica.gob.mx
*.funcionpublica.gob.mx
sideof.funcionpublica.gob.mx
apps.funcionpublica.gob.mx
sira.funcionpublica.gob.mx
sfpwfbi.funcionpublica.gob.mx
sipmg.funcionpublica.gob.mx

Certificate

The complete raw certificate details for manifiesto.funcionpublica.gob.mx in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMxJ98pC+dAs1W7GkyC+
0iFLMwgq2mgEmiXejQ2B7GjlVNnQqavWTbpMJrTBX6SK4pqTdt3EnTtT8y3mkmTK
z7cPMmg6Xcd6T4hipYA8HNnc5VhaMJJ02Jp8rb1FfO2ifWpTJkMo0VdLNn+LmT0d
C5XW52fXUzjonqNBV2WtutscRpuqubIKGBTDxbdvdYu0kTuALgQSS9n4OKUftmkC
HoMD1DXAIVDXm5zsGbImntGRS+NNHGCuSwj49f4Zz1r7SNpFMazS6i6DRDoq1gLJ
JpcD94TlZ6fnlgLpAnJsiP13ULDEDoE1ZXArDIkwEUOVAK0x41UDcTQXGyU01/KO
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 180152784520845115975602830593667677464
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.affirmtrust.com/repository'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust Certificate Authority - OV1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-15 17:03:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-15 17:33:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MX'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ciudad De Mexico'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ciudad De Mexico'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Secretaria De La Funcion Publica'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'manifiesto.funcionpublica.gob.mx'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23328586743281377956379930323494881799678723675006202607531320185133400330217393740094056702183449776521196012817631972924555146166420551931296755276783084605951461615604874931328649554994371413015270739001002330715606179345473333690469939413110934898869087040267528023107171508294277463979619919858297317889950835979364564438049991541975194516147195702572619620070498937071628411749025139880800188928157187620048894930460489821872304956753012422407072124105793799424296030953129055095372141940385314269535291872673526046102293982298059844125202089163100970645640713638240125170634337080899910425300936149055151705641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manifiesto.funcionpublica.gob.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.affirmtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.affirmtrust.com/aftov1ca.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.34697.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.affirmtrust.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.affirmtrust.com/crl/aftov1ca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe60c30da4a29d214f7a784c62c5db14fc3978c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dd37a9adc2c5c1d1ff777e01fb44fa3fda9727dc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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