git.uvt.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:1f:7c:1a:e6:1f:16:43:43:00:72:f1:04:f1:c2:e8:e7:e7 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=git.uvt.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1f:7c:1a:e6:1f:16:43:43:00:72:f1:04:f1:c2:e8:e7:e7
Serial Number (int): 359162861040202902290097837212721438320615
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e5:27:65:51:c2:63:d2:ed:d4:ba:16:a6:3e:70:17:2c:bf:f8:6c:d0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 13:ba:a8:ef:4b:41:dc:61:4c:21:1c:64:a0:7a:d3:6e:ae:93:fe:0b
Fingerprint (sha256): 50:cd:5b:00:1f:3b:74:e2:0b:8c:95:3b:a9:8f:fd:15:88:1d:c1:ef:a2:12:5d:9e:6b:3c:b9:0a:3a:2a:4d:ef

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate git.uvt.cz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for git.uvt.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

git.uvt.cz
gitlab.uvt.cz

Other certificates including the domain name uvt.cz

(limited to 100 certificates)
opentis.uvt.cz
phpmyadmin.hosting.uvt.cz
letest1.uvt.cz
tv.uvt.cz
tiki.uvt.cz
opentis.uvt.cz
spravait.uvt.cz
uvt.cz
mail.uvt.cz
uvt.cz
opentis.uvt.cz
opentis.uvt.cz
centreon.uvt.cz
letest1.uvt.cz
mail.uvt.cz
uvt.cz
ncb.uvt.cz
git.uvt.cz
ncb.uvt.cz
ncb.uvt.cz
mail.uvt.cz
psw.uvt.cz
opentis.uvt.cz
centreon.uvt.cz
opentis.uvt.cz
tv.uvt.cz
uvt.cz
git.uvt.cz
opentis.uvt.cz
psw.uvt.cz
mail.uvt.cz
tv.uvt.cz
centreon.uvt.cz
tv.uvt.cz
letest1.uvt.cz
uvt.cz
opentis.uvt.cz
spravait.uvt.cz
spravait.uvt.cz
phpmyadmin.hosting.uvt.cz
git.uvt.cz
centreon.uvt.cz
uvt.cz
mail.uvt.cz
chat.uvt.cz
uvt.cz
git.uvt.cz
opentis2.uvt.cz
syspass.uvt.cz
spravait.uvt.cz
opentis.uvt.cz
centreon.uvt.cz
mail.uvt.cz
tiki.uvt.cz
phpmyadmin.hosting.uvt.cz
opentis.uvt.cz
mail.uvt.cz
opentis.uvt.cz
ncb.uvt.cz
git.uvt.cz
phpmyadmin.hosting.uvt.cz
centreon.uvt.cz
opentis.uvt.cz
centreon.uvt.cz
spravait.uvt.cz
centreon.uvt.cz
spravait.uvt.cz
opentis2.uvt.cz
centreon.uvt.cz
phpmyadmin.hosting.uvt.cz
opentis.uvt.cz
opentis2.uvt.cz
uvt.cz
opentis.uvt.cz
chat.uvt.cz
tiki.uvt.cz
mail.uvt.cz
tiki.uvt.cz
opentis.uvt.cz
mail.uvt.cz
centreon.uvt.cz
tv.uvt.cz
opentis.uvt.cz
mail.uvt.cz
mail.uvt.cz
ncb.uvt.cz
tv.uvt.cz
spravait.uvt.cz
ncb.uvt.cz
uvt.cz
opentis.uvt.cz
uvt.cz
syspass.uvt.cz
centreon.uvt.cz
centreon.uvt.cz
tv.uvt.cz
spravait.uvt.cz
mail.uvt.cz
tv.uvt.cz
opentis.uvt.cz

Certificate

The complete raw certificate details for git.uvt.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgISBB98GuYfFkNDAHLxBPHC6OfnMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MjMxNzAyNDVaFw0x
OTEyMjIxNzAyNDVaMBUxEzARBgNVBAMTCmdpdC51dnQuY3owggIiMA0GCSqGSIb3
DQEBAQUAA4ICDwAwggIKAoICAQDMqGmc5aflUuxaf75z4/KHCQJUmHTe6ncwAXpU
h4Qv1GMN7EhjS8zN5Cn8XIPvjquy4djTG0Q9WpXW1BbMOx5AgpsXh7tCaRCrymGZ
puVK3RdmV262uHWSnFGzVYI+9v2fSpcCn0o3aPv1XDcJmBvBpcIuFjW7VM2+usNC
NtnJz+gJDVGpsm1yLAmG93uM7Pz0CaE2j80m9vMKDPH6jZGGfgywvbja8EH4uUZl
l0GydmXnH3W5IjQKzcoIU0ZbzCJJ1sJslWgQ/R1wkTf9m3QrijuSPbmosQjIhBNm
E1B6x3bw5uZ9Sbk1Dl7U0PjRIzLsPMTCW4TF8TmVq6uweLPMQdpmRG/fqHcjcI9p
RFvCgkyqCU/v/9MnKBrawxkQ9y4J0Pf+rofUPCv3CHC7X8Mt89gqiFYxSXdbCICy
vMxR9to/KqkFeZg3u1VrwZicKypeukOv44rkWUNgUsxdlQV11wuIHEgz3841X6WU
vT+v1dmXqK/KieMn5G05A1PvxVf/Gho6zyqhM0V2JQ5FcYtOgnXZNbpMRhcu7QsP
tWagQ70J++vPQI9bxLraO7m+STE1x8FRz2jZbFvQDTrVnRzCMKGeikslM0VwW39p
FhFPBY4Wuwm8CYC4DTmB9Rv7Za9jmS9pZkeW3hY5vt6bNJZLFArnToLQwnkvwFK0
uCl0fwIDAQABo4ICbjCCAmowDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTlJ2VRwmPS
7dS6FqY+cBcsv/hs0DAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv
BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s
ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s
ZXRzZW5jcnlwdC5vcmcvMCQGA1UdEQQdMBuCCmdpdC51dnQuY3qCDWdpdGxhYi51
dnQuY3owTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggr
BgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5
AgQCBIH1BIHyAPAAdgB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAA
AW1fSkILAAAEAwBHMEUCIBGE/snTmgtLLJ5r5PIZvyjEFs6aSyovjQdpKZSNVpe7
AiEAzUcz9CJG/3rQWYXbOYx6oxbRDKxKq7xAGy3yKiWnUS4AdgApPFGWVMg5Zbqq
UPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAW1fSkH4AAAEAwBHMEUCIQC0a5cbZhd+
yKSaZt5sOXiJUJjAZWNCjz+rqZoQO4EXOwIgdysxFTyKY9wyn/1wNYPJbgBKjb/a
mY3jiQKpIyfDl8kwDQYJKoZIhvcNAQELBQADggEBAHYR8tdtlrt1K7LEpYjTIE+7
5ZGgtF6iANOAB0Mz7rmHATn2tWMO3BohlxD4exukxazPACruKfmDBXhqnU2iCmBl
Kwk1ZPJ7us7ot1iw6ahPSEBVVc3Uz1ZCHORVhcAA+RxEpksY91n5DaNQ6mNUfGoL
XGJWTTs9/ReP6oeKST1aq5oEZ/EW95ecc0bCvrRqdsLlnZ/NHVRvzVgx9wA2E2gR
1QhyI6su4CcwZAYgDlShbIAqviHqLbo++veCoA5iT7mHpAKh+mktjBiuchIgWGAK
g5zEzVy85jlO7i8BqVx+l+rmQfzO8zzZOfoOod0sOWTAUwVusRV8BsmcCGdDXIc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 359162861040202902290097837212721438320615
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-23 17:02:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-22 17:02:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'git.uvt.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 834931230742710979852028567849649241498955040075192892160187724566662105644249490885151689809702554497552669606882495067323997045485072451062244364888153645213033141149410277737280079934219564789090549070547559470746772684319186179098701910798484868144657871415340657087472146085519775045513971885587994022162992310616957382958519548907026651431360472655653277361282880928372416254179352189459860572089240657559525894384137762575083807576679897243198365698538899509299515750505182218945754464139446472239417656171769375779452400691793198323977694776184002549191853671687807640854539247356179827444742980774324572532721175822790291061028346914572694799563475485003562933612971784115744105804883238792874282200078331829576837272262220664745935786673841567609440494218276702159626077853552022696742821217082680009167555426649409417217592583331221023179515974360934899767246715708873984269975456410756515235149478659277049458847648666730337051154585827039941960995028731242881296575270459735095953963270506465563034617775455734466921069526073859564845249899741038116609219225971581836249742370086109686393463945147595870169998073376701158847438419514634564268966981685159388055180125096565528949364593918938657446927052830065502292898943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e5276551c263d2edd4ba16a63e70172cbff86cd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'git.uvt.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab.uvt.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d5f4a420b000004030047304502201184fec9d39a0b4b2c9e6be4f219bf28c416ce9a4b2a2f8d076929948d5697bb022100cd4733f42246ff7ad05985db398c7aa316d10cac4aabbc401b2df22a25a7512e007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d5f4a41f80000040300473045022100b46b971b66177ec8a49a66de6c3978895098c06563428f3faba99a103b81173b0220772b31153c8a63dc329ffd703583c96e004a8dbfda998de38902a92327c397c9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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