itiswrittencanada.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:8d:17:a1:13:0c:1c:12:86:db:06:a7:be:50:6c:22:6b:0a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=itiswrittencanada.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8d:17:a1:13:0c:1c:12:86:db:06:a7:be:50:6c:22:6b:0a
Serial Number (int): 396460366052915795504486484679487968668426
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c2:ca:e7:07:35:7a:69:11:70:85:a3:7c:3e:c6:fc:75:d3:33:6c:0b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1e:16:2f:29:02:55:88:c8:87:11:ed:02:fa:c4:e1:f7:3f:67:fa:25
Fingerprint (sha256): 67:1c:7f:1f:a2:14:90:27:37:d8:b9:bf:ef:dd:28:57:3e:19:ad:78:30:bf:42:9b:8a:f5:f9:db:a0:49:0c:14

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate itiswrittencanada.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for itiswrittencanada.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

itiswrittencanada.ca

Other certificates including the domain name itiswrittencanada.ca

(limited to 100 certificates)
*.itiswrittencanada.ca
www.estaescrito.ca
itiswrittencanada.ca
fr.itiswrittencanada.ca
fr.itiswrittencanada.ca
*.itiswrittencanada.ca
www.estaescrito.ca
www.estaescrito.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
*.itiswrittencanada.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
fr.itiswrittencanada.ca
www.itiswrittencanada.ca
fr.itiswrittencanada.ca
www.estaescrito.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
www.estaescrito.ca
fr.itiswrittencanada.ca
itiswrittencanada.ca
www.estaescrito.ca
estaescrito.itiswrittencanada.ca
www.itiswrittencanada.ca
itiswrittencanada.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
www.estaescrito.ca
www.itiswrittencanada.ca
www.dev4iiw.wayneatwood.com
fr.itiswrittencanada.ca
www.estaescrito.ca
www.itiswrittencanada.ca
itiswrittencanada.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
estaescrito.itiswrittencanada.ca
www.estaescrito.ca
www.estaescrito.ca
www.itiswrittencanada.ca
fr.itiswrittencanada.ca
www.estaescrito.ca
www.itiswrittencanada.ca
*.itiswrittencanada.ca
www.itiswrittencanada.ca
itiswrittencanada.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
fr.itiswrittencanada.ca
www.estaescrito.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
fr.itiswrittencanada.ca
itiswrittencanada.ca
www.dev4iiw.wayneatwood.com
itiswrittencanada.ca
itiswrittencanada.ca
www.estaescrito.ca
*.itiswrittencanada.ca
www.estaescrito.ca
www.estaescrito.ca
www.itiswrittencanada.ca
www.estaescrito.ca
itiswrittencanada.ca
www.itiswrittencanada.ca
itiswrittencanada.ca
estaescrito.itiswrittencanada.ca
fr.itiswrittencanada.ca
*.itiswrittencanada.ca
www.estaescrito.ca
www.dev4iiw.wayneatwood.com
itiswrittencanada.ca
www.itiswrittencanada.ca
www.estaescrito.ca
www.itiswrittencanada.ca
www.estaescrito.ca
www.itiswrittencanada.ca
www.estaescrito.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
www.estaescrito.ca
www.estaescrito.ca

Certificate

The complete raw certificate details for itiswrittencanada.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgISBI0XoRMMHBKG2wanvlBsImsKMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MTgwMDI4NTZaFw0x
OTA3MTcwMDI4NTZaMB8xHTAbBgNVBAMTFGl0aXN3cml0dGVuY2FuYWRhLmNhMIIC
IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1Y/MIZlXMTMcVshGy8xwNdg4
pdrpvVK3A1LfOoDuPFRtLXF2TLkR8kPtQJMG9U5RsKLeWpv8wIPupdzNs2Bc/K0c
AOjRqBPECDH6TXGtvWP2VSuAOgWcK9tx9ifpagoG1uOwjFG0QqlI3zQTFVEMXR23
HfEwFeBTKWJNkg4xlCXWBiqUXw5e52ukf7HMAffJX2CBpFiGjv8NgQptzsucS85n
vD0WMFQT2QfnMay/kOobJ1mJOUm/S9GxZLgJujghLbcqG2ukrl4F9Gr+ScTamVGo
HAJMYi1z5OBtyKJG2cBcfhsH49jmoEMre9d9PaItNcwHPUYYbA1Gbz9xLX6POdro
VtpOY/xPr9bHOZHmZ/nLjH91MWdKO+JObrz/ETjkWO308lEPss6ac/q3l9O52I0z
3Byem7Z3OS18iOH8hTC99WFMO3h/lA51OHbgPZf2DMMEhlBtk0UJWAYceAw84MKY
5yd8oA+1mMdpF6ezbXfGu4kw4csjXt8gbygIdVwSA7D8lSc8+BKSlzhWwC3MoUJd
wZFWS4YytZm62vymM1h6rY70TIxgqnqMPDxkv9Mm7zccrirLVWWt2V24KQSqyECE
L0ICfyOpPbefc+seHbCfXdhTfbL0BOC3wlxPXD1t8VS0JuJ2xuzjkGORcdDIiLXI
jKaQJ7jtLyqxBtyvBikCAwEAAaOCAmowggJmMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQUwsrnBzV6aRFwhaN8Psb8ddMzbAswHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3
pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2Nz
cC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2Vy
dC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAfBgNVHREEGDAWghRpdGlzd3JpdHRl
bmNhbmFkYS5jYTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAo
MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisG
AQQB1nkCBAIEgfYEgfMA8QB3AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQ
e8xWAAABai4Pnq4AAAQDAEgwRgIhAIoGhKm4xzk368APFCtr+7tV5ffmFKty9ghU
dbkfmlG/AiEAk9+aIXEFnpAIvGbYN1a+BbLbme1Xr5sUpe9RGyD0S+EAdgBj8tvN
6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWouD563AAAEAwBHMEUCICm5
wlXpC4GwSV4SdiG0n7It4hpLHfWWzfKOW93xtIlWAiEAqQxcMcK1MLrQ3qzFex+A
yQR+GxiDlrxriRGfv0+5GFMwDQYJKoZIhvcNAQELBQADggEBAJoRHIBvRWFO5wwS
xJ3BCDG6uvZl6ZVitkbEw5DVyo8uwzINE/ROr16B8O6cnLMdqFpbUGLZCeydntnJ
//oo96gFWL6YHApdNJXDkgH5tTkwVua2Dhi4sc4UVpjb2aTWd20gLOXBXiD9V/N2
0Y2egY8yV6ZdavyJHosUw1OKbls0l8cZFb63Dg9R1oQckk0kjocYaq1v/Ul3hR8U
HHqlQcG1dWiMtQ9sXh9sRVgCbotnNMXFK3sdZ0iCmw2BGLL/fDgJtEtGSOGDYLYs
kDrlP8K/n0MTdo0LAWek+Y86PX+Awn/h+SaVW6IpmPDPpBCEP9rqJmjBe1sm3CQP
T3FvO+Q=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 396460366052915795504486484679487968668426
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-18 00:28:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-17 00:28:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'itiswrittencanada.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 871255757424399911834570844360145507757870014465233341586503710767137552357729485507099257912247407586449892081238730758143323051652137035890779784325555345123651338725983856785655634496787893194210924068178025597101835455431753631861707231195331519040591003028146924353800077008916103959550063268852013130082531194626100267703640166960526745491940128883724345961384742270598818166432330276323945748869003634425739794670401527263408977629359828402852751000289416152481061603147389938048696320939012453867961604256189651066017338209541463962800287146937455365659523947751756552479404493183223304762888305654014695291604115787226465309779445514885765434163989648572025414729147943037133046203680700696722151174366419397995437315066556189376656238677146083147070545133642467663804472871069906521062486576241116323903381341412598416111065255698347563458795144546925020807910268093900695929991378751101227070345091015667162600073718838936625519576812830769017360526768364155475726401578794377803474477561678613433183542617363108553521363478932123582016804525006707833404638546455190802659474906887148745701871092297112688814656415263804922402314268568669849367266906924239119562624435053392479073285106134189819165818470068625605709989417
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c2cae707357a69117085a37c3ec6fc75d3336c0b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itiswrittencanada.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a2e0f9eae00000403004830460221008a0684a9b8c73937ebc00f142b6bfbbb55e5f7e614ab72f6085475b91f9a51bf02210093df9a2171059e9008bc66d83756be05b2db99ed57af9b14a5ef511b20f44be100760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a2e0f9eb70000040300473045022029b9c255e90b81b0495e127621b49fb22de21a4b1df596cdf28e5bddf1b48956022100a90c5c31c2b530bad0deacc57b1f80c9047e1b188396bc6b89119fbf4fb91853
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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