linagora.com

Issued by R3

About this certificate

This digital certificate with serial number 04:17:c7:c5:de:22:38:51:c5:ce:d5:59:21:19:cb:47:97:ee was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=linagora.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:17:c7:c5:de:22:38:51:c5:ce:d5:59:21:19:cb:47:97:ee
Serial Number (int): 356541181925271020419722697556817930065902
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 49:ad:7b:42:08:79:f4:2f:d5:6e:d8:08:58:e4:38:40:ec:5a:da:d4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): df:c2:aa:98:6a:de:4f:13:35:39:cf:47:1b:42:89:c9:b0:21:89:60
Fingerprint (sha256): 85:81:1d:4e:cb:1d:2c:e8:86:8f:0d:e8:89:ec:33:a6:5e:a4:23:5c:3a:a2:5d:e2:0d:eb:89:b6:e8:7a:35:d5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate linagora.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for linagora.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

linagora.com

Other certificates including the domain name linagora.com

(limited to 100 certificates)
*.linagora.com
*.linagora.com
linagora.com
petals.linagora.com
linshare-internal.commun.linagora.com
www.sielte.com.br
ci-obm.linagora.com
ci-obm.linagora.com
huabei.app
poc.linagora.com
*.linagora.com
extranet.linagora.com
zestdevelopers.com
leoneazevedo.eng.br
linagora.com
petals.linagora.com
faire-simple-dev.linagora.com
faire-simple-dev.linagora.com
www.dogan-osthofen.com
*.linagora.com
ci-openpaas.linagora.com
p2023.linagora.com
petals.linagora.com
linshare.commun.linagora.com
linshare.commun.linagora.com
forge.linagora.com
linagora.com
petals.linagora.com
intranet.linagora.com
*.linagora.com
huabei.app
www.tuune.app
linshare.linagora.com
linagora.com
linshare.commun.linagora.com
*.linagora.com
www.buckyapp.com
petals.linagora.com
linagora.com
petals.linagora.com
sycloe-aeap.linagora.com
thebrent.net
grupomkn.com
linshare-internal.commun.linagora.com
forge.linagora.com
p2023.linagora.com
linshare.linagora.com
*.linagora.com
alegoriamedia.com
linagora.com
petals.linagora.com
petals.linagora.com
research.linagora.com
cryptoiclist.com
research.linagora.com
www.puravidasoftware.com
*.linagora.com
300sunnydays.com
poc.linagora.com
linagora.com
www.linagora.com
linshare-internal.commun.linagora.com
linagora.com
petals.linagora.com
faire-simple-dev.linagora.com
www.linagora.com
faire-simple-dev.linagora.com
petals.linagora.com
petals.linagora.com
linshare-internal.commun.linagora.com
shin.gy
linshare-internal.commun.linagora.com
next-mautic.linagora.com
linshare-internal.commun.linagora.com
linagora.com

Certificate

The complete raw certificate details for linagora.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGIDCCBQigAwIBAgISBBfHxd4iOFHFztVZIRnLR5fuMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA1MDkwMjIxMjBaFw0yMzA4MDcwMjIxMTlaMBcxFTATBgNVBAMT
DGxpbmFnb3JhLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAM1H
04IvAa4U48N0aHOilwmhwGdRTTirsEKV6pq4xwppPPZdUfGUyryEUDwNdU0jlWvM
/axd1jye5jee2Lrz9ocUrg8xOnff+Cd0VCGTAOnAqBXf62e9blF6jRVX1C1CiGu8
rVEisNkkGKYWOs3/BSwAdjtgVFhsvS+iXghuYBhbGwHi9+vrTwlibJjx2ex32w6T
gjWEYMyKAkrsilxP+k82JhtCUWf1SePbOQL2mxCFRrPA2x9RajLkVLmqwvLzo1kd
bf0k9qlItRNNSwA4l2MqEF7M2h/8zx0w6mdMe3xQmjJWs/TjElQpEqDnRbS76qMS
Fo7Quwk+ENSoMpmEIW3Ye/Yvkl3jgGKS/nHTuWUXkQRmQ7ZrXZmBCc08XnnTzX4U
Re506MCbhEX3SjS1W4mU15uW78Vr4BsVzAnZUU5p1DLRXiy+H7ZBBjfVSwrmCxdG
OXQQlxFsaCzTkS75H8aKtaPzCzHvtHCRuw5SSB1L2IjHrdc78Sm7oHhxdY+CbnhQ
ARP08M62M1HOAtGE+d0aq/Wn0Yq8ZCOFGePDybL0Bo6hSvM1QJ7GOR2C1wIQSnb+
IM3oDu8KmsL1RBh3yg0vX+LVRtUpR4mBC9Loy9t+PwulrlRfiMGMq0F0uEWOzA2P
VIxC2vp2oxt0KuwTjO7lxWiAVztoan/Kj05gJVFnAgMBAAGjggJJMIICRTAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFEmte0IIefQv1W7YCFjkOEDsWtrUMB8GA1UdIwQY
MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF
BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v
cjMuaS5sZW5jci5vcmcvMBcGA1UdEQQQMA6CDGxpbmFnb3JhLmNvbTBMBgNVHSAE
RTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRw
Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQYGCisGAQQB1nkCBAIEgfcEgfQA8gB3
ALc++yTfnE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABh/6HHWwAAAQDAEgw
RgIhANh7hlKgTH+TYrmodKb73RvjscMSsK7EGLaJ0GOSpk5hAiEArrqd6inHWR7U
JQF2TyltQz5NbXoTcHQ3ml6TVMQnKCMAdwDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr
7Otp4Xd9bQa9bgAAAYf+hx1ZAAAEAwBIMEYCIQDZlvfoV0hOup3rMdZQjO3oOomv
QUs3PT5jjFu83sG9DAIhAMkgZhZW0GUCvKcPKJBfc8CMM2ywdGl4/VsBqhvk0ZJx
MA0GCSqGSIb3DQEBCwUAA4IBAQCpYRLUlo8XKmKsA8K8hmRFfmsj7LVywLzjVPvN
t4+tGQm7omCeuEVlVMFrnlVX168K9BUrCSmh90ZfbfDk/Sz0VsPSFnTT6kolR2b2
uOE5eJ8uI1uXbQOq8xScM2u4/zUzE4wBCCOQH7sa1usuBdk6MAnX4JZvRBwSPniz
kUSDmcRYHjDozKP15y+0DKmcVeVzvrJrPjl8o7ueNeRfy1YIx3v5AlUTurAZKhQk
XCt8/pxQCx7jAZrhfaVJUN7uuxCJ8b/FNjoTAeP8tW+UMJLV0x+v79zNf3tM6TyL
CpUOq04ZmIkbz2dxYkdwteArZgOSnn30ytjWti1mvz+CoZHp
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzUfTgi8BrhTjw3Roc6KX
CaHAZ1FNOKuwQpXqmrjHCmk89l1R8ZTKvIRQPA11TSOVa8z9rF3WPJ7mN57YuvP2
hxSuDzE6d9/4J3RUIZMA6cCoFd/rZ71uUXqNFVfULUKIa7ytUSKw2SQYphY6zf8F
LAB2O2BUWGy9L6JeCG5gGFsbAeL36+tPCWJsmPHZ7HfbDpOCNYRgzIoCSuyKXE/6
TzYmG0JRZ/VJ49s5AvabEIVGs8DbH1FqMuRUuarC8vOjWR1t/ST2qUi1E01LADiX
YyoQXszaH/zPHTDqZ0x7fFCaMlaz9OMSVCkSoOdFtLvqoxIWjtC7CT4Q1KgymYQh
bdh79i+SXeOAYpL+cdO5ZReRBGZDtmtdmYEJzTxeedPNfhRF7nTowJuERfdKNLVb
iZTXm5bvxWvgGxXMCdlRTmnUMtFeLL4ftkEGN9VLCuYLF0Y5dBCXEWxoLNORLvkf
xoq1o/MLMe+0cJG7DlJIHUvYiMet1zvxKbugeHF1j4JueFABE/TwzrYzUc4C0YT5
3Rqr9afRirxkI4UZ48PJsvQGjqFK8zVAnsY5HYLXAhBKdv4gzegO7wqawvVEGHfK
DS9f4tVG1SlHiYEL0ujL234/C6WuVF+IwYyrQXS4RY7MDY9UjELa+najG3Qq7BOM
7uXFaIBXO2hqf8qPTmAlUWcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 356541181925271020419722697556817930065902
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-09 02:21:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-07 02:21:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'linagora.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 837471664225179467265706764621012878610320740036863578195657928806987598927269099837618833181749080925517515085082784014916319504518436273326207538823217062898068208159193699028477036634642531936960371758760182929419062066283694089025205888871368110379920945727367235225224872633573965618238096210361406410154448899909590834319383152146158421807617065894337027246025525309446739236071599133650689991358387973737119961039722747901913556371987316184775133835447573597425436499690154417520592579225570162103451430479735108368933568910993592650337369948368529966668553696968032241424908616231311190797128932070248334603502798979581195083117436870419792681112431850681845190624558531765852665713052108659901819447525181710527351323223526585305850644509421489999138262773899612613373791133273407435846758033164143339899705117575159401730345808092809941085268714360134067053783888711559859270147626102715715020742015291711324805919930967779179448435862866648932178235217656886208602742832526124077020308399121146206615664150971179901602138029362255714542812140510089146281835788470766772761727490250369553039325277918982440658063021086611672538111287401879296353878522532471459272017209419828808434131395986249350964293109909332076211294567
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							49ad7b420879f42fd56ed80858e43840ec5adad4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linagora.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187fe871d6c0000040300483046022100d87b8652a04c7f9362b9a874a6fbdd1be3b1c312b0aec418b689d06392a64e61022100aeba9dea29c7591ed42501764f296d433e4d6d7a137074379a5e9354c4272823007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000187fe871d590000040300483046022100d996f7e857484eba9deb31d6508cede83a89af414b373d3e638c5bbcdec1bd0c022100c920661656d06502bca70f28905f73c08c336cb0746978fd5b01aa1be4d19271
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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