p16.areama.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:62:d6:d1:5a:08:4c:0b:7d:3a:f4:3d:ed:f8:4d:91:d4:cd was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=p16.areama.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:62:d6:d1:5a:08:4c:0b:7d:3a:f4:3d:ed:f8:4d:91:d4:cd
Serial Number (int): 294970071560748339514136399462239392879821
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 61:f1:04:d7:a8:0b:00:fc:fd:92:3e:48:10:fc:be:7b:20:b3:fd:33
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 72:6a:94:9e:cd:61:c5:4e:90:da:91:74:cb:67:f2:77:42:b5:0a:02
Fingerprint (sha256): 7c:b7:49:03:1a:69:6d:46:a8:dd:90:26:61:be:02:0a:c3:d4:89:62:b2:e9:7b:c1:1b:d8:9a:b4:05:39:be:6f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate p16.areama.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for p16.areama.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

p16.areama.net

Other certificates including the domain name areama.net

(limited to 100 certificates)
areama.net
media.areama.net
newenanalytics.uy
areama.net
plugins.areama.net
play.whatc.app
p17arvkm.areama.net
p17arallimg.areama.net
media.areama.net
p17artab.areama.net
plugins.areama.net
p17arlsf.areama.net
p17arlsf.areama.net
p17arvkm.areama.net
p16.areama.net
p16artab.areama.net
p17artab.areama.net
p16artab.areama.net
areama.net
www.andycode.dev
p16-2.areama.net
www.davidair.com
www.fpmutual.com
enema.video
wp496.areama.net
p17arlsf.areama.net
itprogramming.tk
areama.net
areama.net
*.areama.net
p17arallimg.areama.net
p17arlsf.areama.net
p17arcu.areama.net
p17arcu.areama.net
holiday.caitlinandjosh.love
p17arlsf.areama.net
p17arcu.areama.net
p17arlsf.areama.net
*.areama.net
p17artab.areama.net
p17arallimg.areama.net
p17arvkm.areama.net
p17arallimg.areama.net
p16artab.areama.net
www.sentoo-sud.tn
go.areama.net
wp496.areama.net
p17arlsf.areama.net
p16.areama.net
www.andycode.dev
areama.net
plugins.areama.net
p17arcu.areama.net
p16artab.areama.net
*.areama.net
p17artab.areama.net
p17arvkm.areama.net
p17artab.areama.net
p17arlsf.areama.net
p17arcu.areama.net
p16.areama.net
p17arvkm.areama.net
plugins.areama.net
media.areama.net
p17artab.areama.net
wp496.areama.net
areama.net
areama.net
p17arcu.areama.net
p17arcu.areama.net
p17arlsf.areama.net
mlspro2.areama.net
firebase.insvilablareix.net
media.areama.net
*.areama.net
p16.areama.net
areama.net
areama.net
cash.thiagofesta.com
p17arallimg.areama.net
enema.video
p17arallimg.areama.net
p17arlsf.areama.net
p16arpv.areama.net
p16.areama.net
p17arstd.areama.net
p16.areama.net
wp496.areama.net
go.areama.net
chef.fod.live
chef.fod.live
p16arokpay.areama.net
plugins.areama.net
p16artab.areama.net
p17arcu.areama.net
media.areama.net
www.fpmutual.com
p17artab.areama.net
www.wine.passionrate.com
areama.net

Certificate

The complete raw certificate details for p16.areama.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGBjCCBO6gAwIBAgISA2LW0VoITAt9OvQ97fhNkdTNMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA3MjUyMTAwMjBaFw0x
ODEwMjMyMTAwMjBaMBkxFzAVBgNVBAMTDnAxNi5hcmVhbWEubmV0MIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuUCddqNO2ntDuxdSeTByNTI7mTCIH2Q
MnjYlD9qPv64a/oupatN/RXqQ4yveuR7OD4/d37YeaT1IiPGgG83ReWeandUyu36
x6udouNS4aLuKR3Zhrk3jlL9PNgDVEas7gTNfzz+Cm5OywdgwaOgM+SevqDbPUAL
HLNCUn1CxAXI8U9uq43T1Tg8L81/ty/nr7JJQROJhRwo9DCXnUTiIutUT+YGqKB9
2tygHC1+6pvFOd5AgYzDChI+FDVAKdo467XN68DMYxtwSM/uC3d4eY/CrpMB1AT4
l5vKURDXymkr+IkHa7KgJxfpyKN3tV+ZNfgNmwLBrJUetXIgej2xzwIDAQABo4ID
FTCCAxEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRh8QTXqAsA/P2SPkgQ/L57ILP9
MzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRj
MGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5v
cmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5v
cmcvMBkGA1UdEQQSMBCCDnAxNi5hcmVhbWEubmV0MIH+BgNVHSAEgfYwgfMwCAYG
Z4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nw
cy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZp
Y2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMg
YW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xp
Y3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8w
ggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgDBFkrgp3LS1DktyArBB3DU8MSb3pka
SEDB+gdRZPYzYAAAAWTTdQ8RAAAEAwBHMEUCIBBRHUP1REFQXiqGm75Tsm2yC3IR
dAFZxeURW4C0LTg9AiEA9NLx/63GT3uiShGQq8yZoVfnoAosATLCqpXxKIfu9NgA
dQApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWTTdQ9iAAAEAwBG
MEQCIBK1MXqgx66m1DW7wsImkrcqMMpTrN7EfwHmq/mkKBcIAiBSgunq2FVH51r9
WImENOvcjrEPPfe9YEM4aTtXvgM4tjANBgkqhkiG9w0BAQsFAAOCAQEAQgQoTY4j
YhKk9E6OOtmMZgQKnyrFAT6MpStd4RGLZVn9DgK8dZWpLFA45BkgKmymQBe4+TP/
MbVhoQfrDYXPTjRV2uETIl6BVAS3JQELdQ1KMhHnc0RYVwlHcm84MUpJf6iBSks2
Ans0cJKW4MGHhOFkrElGc15rzBpDT2MMT+2toOj4PVwxdQp7fOYLPqS/fwDxXg1p
T5TGbjG3aKaIimSGkNXFdkH9O//WjoW3+VudDZztO685IdQa40+hG70OpRy/eY9I
oo5Jc8o4aobbFXKKoJCfZ4gNhhb5BCxXd21asvZ4Odpj/DcJgHvIdsJpEP5L/kpx
qL2af5lbfZ9rzA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuUCddqNO2ntDuxdSeTB
yNTI7mTCIH2QMnjYlD9qPv64a/oupatN/RXqQ4yveuR7OD4/d37YeaT1IiPGgG83
ReWeandUyu36x6udouNS4aLuKR3Zhrk3jlL9PNgDVEas7gTNfzz+Cm5OywdgwaOg
M+SevqDbPUALHLNCUn1CxAXI8U9uq43T1Tg8L81/ty/nr7JJQROJhRwo9DCXnUTi
IutUT+YGqKB92tygHC1+6pvFOd5AgYzDChI+FDVAKdo467XN68DMYxtwSM/uC3d4
eY/CrpMB1AT4l5vKURDXymkr+IkHa7KgJxfpyKN3tV+ZNfgNmwLBrJUetXIgej2x
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294970071560748339514136399462239392879821
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-25 21:00:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-23 21:00:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'p16.areama.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26118019671011834029176206898132769803437658098585217360869231202903697974219052285845719093194786715373638348671825016585212020492453194019541382681345587980376418955021592713072315939772396743855054653365361394498138784427765030725725734221170533445888171237982303066981439597662429912965072749040280799582665804051354538828496019064477968928381404915788175940105104629796868618358307363344219062453863730442624206355965867903750834260207524228046945425449732314866469500037991013231352898213669306255739261981139964926087220504585273803364427041054422313380753430597690581559537511490140633421017196002811567780303
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							61f104d7a80b00fcfd923e4810fcbe7b20b3fd33
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p16.areama.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f6336000000164d3750f110000040300473045022010511d43f54441505e2a869bbe53b26db20b7211740159c5e5115b80b42d383d022100f4d2f1ffadc64f7ba24a1190abcc99a157e7a00a2c0132c2aa95f12887eef4d8007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000164d3750f620000040300463044022012b5317aa0c7aea6d435bbc2c22692b72a30ca53acdec47f01e6abf9a428170802205282e9ead85547e75afd58898434ebdc8eb10f3df7bd604338693b57be0338b6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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