*.pelikirja.net

Issued by R3

About this certificate

This digital certificate with serial number 03:5d:94:4d:4a:e1:f9:68:18:c0:a7:84:29:4e:94:f3:c2:03 was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.pelikirja.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5d:94:4d:4a:e1:f9:68:18:c0:a7:84:29:4e:94:f3:c2:03
Serial Number (int): 293180244987964126621437180735424356925955
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 62:ea:ac:e4:1d:37:32:57:6e:5f:f9:05:26:e9:3f:4e:f5:44:6e:48
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): aa:de:8a:53:58:bf:83:75:60:5c:17:cc:7a:b9:4f:80:90:c2:0c:70
Fingerprint (sha256): 88:0c:82:56:5e:f7:23:9c:df:37:7d:47:04:95:2c:a0:b6:9e:53:c1:65:d6:1f:7a:ca:6d:30:a6:a8:bf:3d:5d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.pelikirja.net

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.pelikirja.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.clementia.fi
*.jokirannankantriklupi.com
*.jokirannankantriklupi.fi
*.muksunkirja.com
*.muksunkirja.fi
*.muksunkirja.net
*.pelikirja.net
*.taatankirja.fi
clementia.fi
jokirannankantriklupi.com
jokirannankantriklupi.fi
muksunkirja.com
muksunkirja.fi
muksunkirja.net
pelikirja.net
taatankirja.fi
www.jokirannankantriklupi.clementia.fi
www.muksunkirja.clementia.fi
www.pelikirja.clementia.fi
www.taatankirja.clementia.fi

Other certificates including the domain name pelikirja.net

(limited to 100 certificates)
pelikirja.net
pelikirja.net
pelikirja.net
pelikirja.net
pelikirja.net
pelikirja.net
pelikirja.net
pelikirja.net
pelikirja.net
pelikirja.net
pelikirja.net
*.pelikirja.net
pelikirja.net
pelikirja.net
muksunkirja.fi
pelikirja.net
pelikirja.net
*.pelikirja.net
pelikirja.net
pelikirja.net
*.clementia.fi
pelikirja.net
pelikirja.net
pelikirja.net
*.muksunkirja.com
pelikirja.net
pelikirja.net

Certificate

The complete raw certificate details for *.pelikirja.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGljCCBX6gAwIBAgISA12UTUrh+WgYwKeEKU6U88IDMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA3MTQwOTE4NTlaFw0yMzEwMTIwOTE4NThaMBoxGDAWBgNVBAMM
DyoucGVsaWtpcmphLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ANaODxtFdBGBtpFC1vKDDilkyJc3Z0FkpWhcke3eaW74D7Fzem59EFNM+PhJpqrY
w/nyeVltN+CqEYVNVWaEG05xZWAi5ds74hZ2Oa4Ux/PejpJUIDlNtxku0pUET0+6
fTpbwcK9UGPTc/YXsdKMfgqg8KjJY1obsCUcaNnIbHALtXq5KFjD91gS+FT8m1u+
PNeNmKwW8LxCg62detRk+Vy9ZFPka4WLfnKkW5KhbfvRkszpWXny7+ctgPgV+5bx
b3Bc9ldA5V+1Gql3qzEMWjMKcqZWZtyt4rBJCnaUS3/l7TYTK+yjXYuTbrw8FnhW
sy+vIV+AQDAlszlgDqcR7G8CAwEAAaOCA7wwggO4MA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV
HQ4EFgQUYuqs5B03MlduX/kFJuk/TvVEbkgwHwYDVR0jBBgwFoAUFC6zF7dYVsuu
UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v
cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y
Zy8wggHFBgNVHREEggG8MIIBuIIOKi5jbGVtZW50aWEuZmmCGyouam9raXJhbm5h
bmthbnRyaWtsdXBpLmNvbYIaKi5qb2tpcmFubmFua2FudHJpa2x1cGkuZmmCESou
bXVrc3Vua2lyamEuY29tghAqLm11a3N1bmtpcmphLmZpghEqLm11a3N1bmtpcmph
Lm5ldIIPKi5wZWxpa2lyamEubmV0ghAqLnRhYXRhbmtpcmphLmZpggxjbGVtZW50
aWEuZmmCGWpva2lyYW5uYW5rYW50cmlrbHVwaS5jb22CGGpva2lyYW5uYW5rYW50
cmlrbHVwaS5maYIPbXVrc3Vua2lyamEuY29tgg5tdWtzdW5raXJqYS5maYIPbXVr
c3Vua2lyamEubmV0gg1wZWxpa2lyamEubmV0gg50YWF0YW5raXJqYS5maYImd3d3
Lmpva2lyYW5uYW5rYW50cmlrbHVwaS5jbGVtZW50aWEuZmmCHHd3dy5tdWtzdW5r
aXJqYS5jbGVtZW50aWEuZmmCGnd3dy5wZWxpa2lyamEuY2xlbWVudGlhLmZpghx3
d3cudGFhdGFua2lyamEuY2xlbWVudGlhLmZpMBMGA1UdIAQMMAowCAYGZ4EMAQIB
MIIBAgYKKwYBBAHWeQIEAgSB8wSB8ADuAHUAejKMVNi3LbYg6jjgUh7phBZwMhOF
TTvSK8E6V6NS61IAAAGJU+k2SwAABAMARjBEAiBJ6HVGWP1NGRmtvKYrpvtd8R2H
mbkHB3a+y37R4NlG9gIgVHxfUnXvXxir6jwTexN+fTnxkKyPkix5f0x03oDhytwA
dQDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYlT6TY2AAAEAwBG
MEQCIDqKuYZYMiRri6Pjiic+fiTh2aUxBafC8YjzzSnbTM3BAiAe556tHbUenTT2
WTtUj29/x36VvYDvvjLHYMtla2tsAzANBgkqhkiG9w0BAQsFAAOCAQEAq0t3WfuN
u4YFsu1udxAGx9/Jzx10eBmOZpBCtUwvPTFbHzFvST/NccQM68u7b5nb686BZXqd
5YDUgrtMdONxo7EY98VqMlIgh+H6EoKe0KzgTYtqkgOhuy8wPOb2avL/LjTE6y/Y
osNDgY7tDlXh0QPLZOxrYUVArfGrFvfY9pDbGJ8hO5Y56tt2oubcT7ZKECFwlzCn
grNOv0zKTkWlAYATq50KcTmup781cgioDl9+X1f2yvw4CItSeBwkRRiapf7UojmM
GV85a2ligT+i741XijB/oPMsga7Vpj0uF+5eOHbuZ2dFbX/mmRswy/5Yaj5Gu0p9
ysW6oGnbCxq2lg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1o4PG0V0EYG2kULW8oMO
KWTIlzdnQWSlaFyR7d5pbvgPsXN6bn0QU0z4+EmmqtjD+fJ5WW034KoRhU1VZoQb
TnFlYCLl2zviFnY5rhTH896OklQgOU23GS7SlQRPT7p9OlvBwr1QY9Nz9hex0ox+
CqDwqMljWhuwJRxo2chscAu1erkoWMP3WBL4VPybW748142YrBbwvEKDrZ161GT5
XL1kU+RrhYt+cqRbkqFt+9GSzOlZefLv5y2A+BX7lvFvcFz2V0DlX7UaqXerMQxa
MwpyplZm3K3isEkKdpRLf+XtNhMr7KNdi5NuvDwWeFazL68hX4BAMCWzOWAOpxHs
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293180244987964126621437180735424356925955
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-14 09:18:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-12 09:18:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.pelikirja.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27085049171377308067583101438864364819862345990134847956862274077697073891841414539553693543712303055356069149373978536906664223521098095933649886718149605905925457619963295011091521734740512669438521134781587103950078601273703348643637413490411347962706708584649484377594041588104779502631878133257917920617266332986726320470104154208782685358288793013245330081210577738483562697919381882015889311393358060906238622172477369153900752738824477191805030921285893148887524410417319186791723569651649214464595354727272175750142602830593316890483699129072372917614174462467295111830240179115217040633173815762210312547439
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							62eaace41d3732576e5ff90526e93f4ef5446e48
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (444 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clementia.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jokirannankantriklupi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jokirannankantriklupi.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muksunkirja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muksunkirja.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muksunkirja.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pelikirja.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.taatankirja.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clementia.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jokirannankantriklupi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jokirannankantriklupi.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muksunkirja.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muksunkirja.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muksunkirja.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pelikirja.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taatankirja.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jokirannankantriklupi.clementia.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.muksunkirja.clementia.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pelikirja.clementia.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taatankirja.clementia.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018953e9364b0000040300463044022049e8754658fd4d1919adbca62ba6fb5df11d8799b9070776becb7ed1e0d946f60220547c5f5275ef5f18abea3c137b137e7d39f190ac8f922c797f4c74de80e1cadc007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018953e93636000004030046304402203a8ab9865832246b8ba3e38a273e7e24e1d9a53105a7c2f188f3cd29db4ccdc102201ee79ead1db51e9d34f6593b548f6f7fc77e95bd80efbe32c760cb656b6b6c03
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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