law.kuaeng.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6d:69:79:4b:c5:3c:1b:54:5f:35:5d:15:14:49:7e:4a:0a was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=law.kuaeng.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6d:69:79:4b:c5:3c:1b:54:5f:35:5d:15:14:49:7e:4a:0a
Serial Number (int): 298567834533947601767384319751015528024586
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 54:3e:59:4f:6d:33:5a:6e:ef:08:d4:2e:fc:45:aa:2d:c8:f6:42:f4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 98:93:cc:24:7b:74:51:0b:d6:23:dd:9b:1c:f9:be:b9:c8:56:60:bd
Fingerprint (sha256): 87:09:06:51:5c:30:3a:49:45:4e:55:58:e4:5b:ba:64:bb:fc:0f:31:67:e1:07:05:dc:25:ff:69:3f:c3:de:95

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate law.kuaeng.com

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for law.kuaeng.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

accounting.kuaeng.com
computer.kuaeng.com
cooking.kuaeng.com
culinary.kuaeng.com
dating.kuaeng.com
education.kuaeng.com
homedecor.kuaeng.com
homefurnishing.kuaeng.com
jewelry.kuaeng.com
law.kuaeng.com
pets.kuaeng.com
realestate.kuaeng.com
sales.kuaeng.com
vacationhomes.kuaeng.com
webdesign.kuaeng.com

Other certificates including the domain name kuaeng.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for law.kuaeng.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGhzCCBW+gAwIBAgISA21peUvFPBtUXzVdFRRJfkoKMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEyMTYxMTM4NTlaFw0x
OTAzMTYxMTM4NTlaMBkxFzAVBgNVBAMTDmxhdy5rdWFlbmcuY29tMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+nwSjjHKf6RxCOI1vRcs44+6ZjFl9IP
zMfdVQ86X94gsc+HR9Sq0Fvs4D+AWXueLuCtFqi/CYAP0qaBMnoeD3NMF7K1YsMt
du/zjb3Lz7swYMF3m8NDaSw1Na5evjzGHpv54gJpB2W+85h1Iqs5cprK5V9k7ZOa
2t3NJgwLdWv64DejJ1QsU83O74KsYjDacUBy5FvGdWy98IhEHYTh7HJ8y4iAbm6J
7Lvuvv6pA2BiQH1KdXgJ6aUnAX5d6zNmyTMCSY28fS6WmnC1cTWASobzmrgVwA9f
ni4Py7GhPuNl5NVw+Jw8qs7dsvPKOVu/sKc2nH7WVEusYNmjRVC8NwIDAQABo4ID
ljCCA5IwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRUPllPbTNabu8I1C78RaotyPZC
9DAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRj
MGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5v
cmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5v
cmcvMIIBSgYDVR0RBIIBQTCCAT2CFWFjY291bnRpbmcua3VhZW5nLmNvbYITY29t
cHV0ZXIua3VhZW5nLmNvbYISY29va2luZy5rdWFlbmcuY29tghNjdWxpbmFyeS5r
dWFlbmcuY29tghFkYXRpbmcua3VhZW5nLmNvbYIUZWR1Y2F0aW9uLmt1YWVuZy5j
b22CFGhvbWVkZWNvci5rdWFlbmcuY29tghlob21lZnVybmlzaGluZy5rdWFlbmcu
Y29tghJqZXdlbHJ5Lmt1YWVuZy5jb22CDmxhdy5rdWFlbmcuY29tgg9wZXRzLmt1
YWVuZy5jb22CFXJlYWxlc3RhdGUua3VhZW5nLmNvbYIQc2FsZXMua3VhZW5nLmNv
bYIYdmFjYXRpb25ob21lcy5rdWFlbmcuY29tghR3ZWJkZXNpZ24ua3VhZW5nLmNv
bTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUF
BwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIE
gfUEgfIA8AB2AOJpS64m6OlACeiGG7Y7g9Q+5/50iPukjyiTAZ3d8dv+AAABZ7cG
3TcAAAQDAEcwRQIgesjUjBIq75GZUsv6Vx0ppVh9oSlVXW6GaBl9A1T9424CIQCW
CqL5FOTxLTL3uPRK2SvsAqDcaoLJ0yIXd19fHl1JhwB2AGPy283oO8wszwtyhCdX
azOkjWF3j711pjixx2hUS9iNAAABZ7cG3YsAAAQDAEcwRQIgdsLHxz1PsW9JWFVA
Dp7Nsgq9HY4XzKgRcIHj+LLGS5wCIQDHrKVCHefcSzg7Vrsl7XvrEIdB07t9pqMK
jU652l+9jjANBgkqhkiG9w0BAQsFAAOCAQEAVWlPRgn1E0kBXGAL2qaBLJb6HO22
KxkatRQpRjOQKYdozQ1uYidBBJUkBvfWcnjBI+XkeVeAkPpd0RE5QVxpAXFFahA6
6QejGFEMLHYtsH+lZaJad6M+HkqSjufSKzbQrUHWn5oJLWxtRrNCR63SBH9vjRb0
HCfHNsIINi2JyAnVK5IgY9gHSwc0zq+S0nmzhMFTppf002DFpbc/l7Pw7FDlgm+p
+QX31JFHgqg2k+p2tGvzv25NFI4/bX3SsYsRDZtvBaDvQM7Cx0oRFDkxOZ+RbYBN
btf6tKF6ZY1p+zj1yhrqWATq0263sVFC7Utl7+0Xgg7BR6s3+65o8dbKTQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+nwSjjHKf6RxCOI1vRc
s44+6ZjFl9IPzMfdVQ86X94gsc+HR9Sq0Fvs4D+AWXueLuCtFqi/CYAP0qaBMnoe
D3NMF7K1YsMtdu/zjb3Lz7swYMF3m8NDaSw1Na5evjzGHpv54gJpB2W+85h1Iqs5
cprK5V9k7ZOa2t3NJgwLdWv64DejJ1QsU83O74KsYjDacUBy5FvGdWy98IhEHYTh
7HJ8y4iAbm6J7Lvuvv6pA2BiQH1KdXgJ6aUnAX5d6zNmyTMCSY28fS6WmnC1cTWA
SobzmrgVwA9fni4Py7GhPuNl5NVw+Jw8qs7dsvPKOVu/sKc2nH7WVEusYNmjRVC8
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298567834533947601767384319751015528024586
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-16 11:38:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-16 11:38:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'law.kuaeng.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27761548226774839698291123607558190600853714765477891787408659235424566098898924115199182405734906533432962513848206475677319439040583702648300225532591348953376294621009791733336593793378850715791138580194176183135210273638723497384504010842559610411752699402376650067886611613583706461261586208868222426953086033315018620687739936002763515097615158550815328707396534592130758974877405272537001841044015282659858692124666812125937766377037681682764864519313869588096011908299319117526734556653645433570992767554064881861856583687938772202930474462920412685560923322721345109313836804552181990086720227892051559103543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							543e594f6d335a6eef08d42efc45aa2dc8f642f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (321 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounting.kuaeng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'computer.kuaeng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cooking.kuaeng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'culinary.kuaeng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dating.kuaeng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'education.kuaeng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homedecor.kuaeng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homefurnishing.kuaeng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jewelry.kuaeng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'law.kuaeng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pets.kuaeng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestate.kuaeng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.kuaeng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vacationhomes.kuaeng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdesign.kuaeng.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000167b706dd37000004030047304502207ac8d48c122aef919952cbfa571d29a5587da129555d6e8668197d0354fde36e022100960aa2f914e4f12d32f7b8f44ad92bec02a0dc6a82c9d32217775f5f1e5d498700760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000167b706dd8b0000040300473045022076c2c7c73d4fb16f495855400e9ecdb20abd1d8e17cca8117081e3f8b2c64b9c022100c7aca5421de7dc4b383b56bb25ed7beb108741d3bb7da6a30a8d4eb9da5fbd8e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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