nas.zer0.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:61:22:ad:56:ad:5b:d9:0f:75:ae:74:9e:a1:9d:22:92:23 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nas.zer0.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:61:22:ad:56:ad:5b:d9:0f:75:ae:74:9e:a1:9d:22:92:23
Serial Number (int): 381502627095607354782115722932403789009443
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bb:0c:f3:b8:49:98:ba:3d:14:7c:6e:04:88:be:11:cf:e1:a6:a3:85
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f1:f9:64:a6:dc:22:c9:e0:69:49:5f:10:a9:cc:00:c6:fd:ca:eb:d5
Fingerprint (sha256): 4e:d4:d4:0b:45:ef:a6:14:e6:ce:b6:0b:07:19:15:af:e1:53:63:d5:d9:91:12:35:be:d7:de:57:2c:51:97:3f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nas.zer0.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nas.zer0.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

derryaire.asuscomm.com
nas.zer0.de

Other certificates including the domain name zer0.de

(limited to 100 certificates)
cloud.zer0.de
zer0.de
zer0.de
groupware.zer0.de
cloud.zer0.de
idmdev.marum.de
zer0.de
zer0.de
groupware.zer0.de
zer0.de
zer0.de
idmdev.marum.de
groupware.zer0.de
zer0.de
groupware.zer0.de
nas.zer0.de
zer0.de
nas.zer0.de
zer0.de
zer0.de
zer0.de
cloud.zer0.de
idmdev.marum.de
zer0.de
nas.zer0.de
zer0.de
groupware.zer0.de
www.zer0.de
groupware.zer0.de
groupware.zer0.de
idmdev.marum.de
zer0.de
cloud.zer0.de
zer0.de
zer0.de
zer0.de
groupware.zer0.de
zer0.de
zer0.de
zer0.de
groupware.zer0.de
zer0.de
www.zer0.de
cloud.zer0.de
groupware.zer0.de
zer0.de
imap.zer0.de
zer0.de
zer0.de
zer0.de
cloud.zer0.de
zer0.de
cloud.zer0.de
zer0.de
cloud.zer0.de
zer0.de
zer0.de
cloud.zer0.de
cloud.zer0.de
idmdev.marum.de
zer0.de
zer0.de
cloud.zer0.de
zer0.de
cloud.zer0.de
cloud.zer0.de
cloud.zer0.de
cloud.zer0.de
zer0.de
cloud.zer0.de
zer0.de
cloud.zer0.de
cloud.zer0.de
zer0.de
cloud.zer0.de
zer0.de
zer0.de
groupware.zer0.de
idmdev.marum.de
zer0.de
idmdev.marum.de
idmdev.marum.de
groupware.zer0.de
autoconfig.zer0.de
zer0.de
zer0.de
zer0.de
cloud.zer0.de
zer0.de
cloud.zer0.de
idmdev.marum.de
zer0.de
idmdev.marum.de
groupware.zer0.de
autoconfig.zer0.de
zer0.de
groupware.zer0.de
cloud.zer0.de
groupware.zer0.de
zer0.de

Certificate

The complete raw certificate details for nas.zer0.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgISBGEirVatW9kPda50nqGdIpIjMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjEyMDUzMTRaFw0x
OTEwMTkyMDUzMTRaMBYxFDASBgNVBAMTC25hcy56ZXIwLmRlMIICIjANBgkqhkiG
9w0BAQEFAAOCAg8AMIICCgKCAgEAy6PgQ59pHanUZR5uUAzT76RjCsP1EkYyqKUl
N0KsHLotXQBk7hsQq7xwljB5DpJKoFADkqdXsE95/lqvYHankQ2AsU6E0HBhlltN
mfQc7pFU56a/WEyTUjlhT6mPjDyvuvVocFQwM3oG4qb6IlKLoNUVL0l3gqW29JrJ
u2vTdMPhwKCOMO6XiWG2nn7ZbMfhMhERnouRSYYjwWQjqmmfWI3W44SERGdF1ktC
5g0F6OaO2u0hZXLtti1P5pWl8f3B+z4lEUvZyTW2KPy4ys/takOrMmm0VVHero0F
anXx0u3MftBicAo3vglfihUA2BHsPtlWXV4IHmoZpKIrOwRbw0TcNnsgrbb3mGhf
HXq2Cjuq7paOe0xBHlE6Od8L6AxUSyx9vjXMgRhMGjNfYVoBW5O9x1aURFfdZlzD
v9yS0wQrmP8613q7+dmB44iKxoNJKaJNQ8Amo8zlYXa/Tj513E1juBDTU/jEuFPF
zXSxDp5q79fyQphaC0g2q8HNFdS84sLJWNIY7nvWpM0wzM5mxQNJ12fAos7WIjWS
3FQqFJ9JK/stM8R0QBsjusNPuC7tT1p2hN/i2aQPu6pBm6cq76YIFrmXZkyEJGr+
k6pP7zKmF8WKJN7C8hDuXjQaAmR7DT0jrd5udaQhUiAK7+If5abiLXrSqcN6zD0h
DLIpolUCAwEAAaOCAnkwggJ1MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUuwzzuEmY
uj0UfG4EiL4Rz+Gmo4UwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw
bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzAuBgNVHREEJzAlghZkZXJyeWFpcmUuYXN1c2NvbW0u
Y29tggtuYXMuemVyMC5kZTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLf
EwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCC
AQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAI
xjc1eeYQe8xWAAABbBaGSMkAAAQDAEgwRgIhAM6nDDTZ8ffUZel8fYPnuzf6B3yi
O5xfB+wiv0KVcg0QAiEAuvNDOS0EU8cD0rpGcHIGRhJTEl6jjQRjEKBcY6s4JCsA
dgBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWwWhkf7AAAEAwBH
MEUCIQCHTHz90clGJj4FGG8xQ1hz9G3XRRDxN+tyE6f4W0AMpQIgHlrzhUBkNecx
VYwy4snr1NzkIM30z0VUwvIIu9E9RgQwDQYJKoZIhvcNAQELBQADggEBACIkgDlw
ixHhiSN5s6b459MjZo/z7RvuSiiM6joStTngOCRxr2z++cPb0fJD1HyEOfA5c6Qn
Kg0uYUeuQp+7I6qoOVksYMOZBht8zkspL1231BBnm5T8iJILIJTeGkOlhWsKS/SY
vegfF8HXK7NpsYDmsu9WPn9bwdPVxEUqz+hyigV0/54ao1ptwTiE21GoMmQm8Z++
vHl5mE6RTgOMEidxodNqrS8YaPQ/SRpaLqP1lqVLEY+eDuUQn2qT9Pzyd+QUcGdv
NOPWxfGfX0wCMsxDck8a6E33Fn3QFiLA23J1WMugD8EouH1INgd5PWRNmOtvd+d4
OVrzrHGAy7kZQTU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAy6PgQ59pHanUZR5uUAzT
76RjCsP1EkYyqKUlN0KsHLotXQBk7hsQq7xwljB5DpJKoFADkqdXsE95/lqvYHan
kQ2AsU6E0HBhlltNmfQc7pFU56a/WEyTUjlhT6mPjDyvuvVocFQwM3oG4qb6IlKL
oNUVL0l3gqW29JrJu2vTdMPhwKCOMO6XiWG2nn7ZbMfhMhERnouRSYYjwWQjqmmf
WI3W44SERGdF1ktC5g0F6OaO2u0hZXLtti1P5pWl8f3B+z4lEUvZyTW2KPy4ys/t
akOrMmm0VVHero0FanXx0u3MftBicAo3vglfihUA2BHsPtlWXV4IHmoZpKIrOwRb
w0TcNnsgrbb3mGhfHXq2Cjuq7paOe0xBHlE6Od8L6AxUSyx9vjXMgRhMGjNfYVoB
W5O9x1aURFfdZlzDv9yS0wQrmP8613q7+dmB44iKxoNJKaJNQ8Amo8zlYXa/Tj51
3E1juBDTU/jEuFPFzXSxDp5q79fyQphaC0g2q8HNFdS84sLJWNIY7nvWpM0wzM5m
xQNJ12fAos7WIjWS3FQqFJ9JK/stM8R0QBsjusNPuC7tT1p2hN/i2aQPu6pBm6cq
76YIFrmXZkyEJGr+k6pP7zKmF8WKJN7C8hDuXjQaAmR7DT0jrd5udaQhUiAK7+If
5abiLXrSqcN6zD0hDLIpolUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 381502627095607354782115722932403789009443
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-21 20:53:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-19 20:53:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nas.zer0.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 830779292218979102135807959547736425837198593062737454118402655015760171205980214926198552417745855566472392039643432034059805118947209138717173769853163635541797375878440522441059195614969583514263311605979830441241895583715414375858168436134690658590874753288251207015285395130631968390572900274669825344199074680905186187631547571888618660647994785590365041094746107470858284840408579321538986587663538346027613231222836722258440091210300430611124040961596188574730147278483122022830906185462042216150043052508633685985236475027841637213491208053681784805902119332427104732346376474508617771607622696721911905445826602217466982969817573673899220055103823323936261789627421305726494067350422115930854367918142153234583731441486606505902673391608749480585517278910048643494144305760718482889359939128362745564112046952133813905150148396057130951695879402962000623159025571034497418856796886663670920755293707850746678233649723737404011231091748895700080223716001168374103616583244184319426913618822453378961203333461774669721661588231796802684881883453383128617714428772659973563003850601982785594446687431956686873637628959907683768930406770408981520963705950902511985976423363821845148632041558410138866514876017261522380642689621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb0cf3b84998ba3d147c6e0488be11cfe1a6a385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derryaire.asuscomm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nas.zer0.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c168648c90000040300483046022100cea70c34d9f1f7d465e97c7d83e7bb37fa077ca23b9c5f07ec22bf4295720d10022100baf343392d0453c703d2ba46707206461253125ea38d046310a05c63ab38242b00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c168647fb0000040300473045022100874c7cfdd1c946263e05186f31435873f46dd74510f137eb7213a7f85b400ca502201e5af385406435e731558c32e2c9ebd4dce420cdf4cf4554c2f208bbd13d4604
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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