itiswrittencanada.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d6:31:b7:38:f5:1a:f3:36:f6:1a:0d:6f:c1:81:3a:11:97 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=itiswrittencanada.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d6:31:b7:38:f5:1a:f3:36:f6:1a:0d:6f:c1:81:3a:11:97
Serial Number (int): 334223367833714322131527566299508967608727
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: aa:39:5b:64:df:b4:e4:41:ae:c9:3c:bd:2d:1a:a5:28:dd:98:7f:fe
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c4:8f:37:15:6d:aa:68:06:a9:1d:bb:ac:e6:eb:2d:1c:b0:65:ef:23
Fingerprint (sha256): 8f:45:a3:3b:fe:70:9f:27:59:64:98:cb:46:6a:f6:63:a1:62:67:b7:77:f3:dd:c4:ec:a5:ff:48:26:00:9c:9b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate itiswrittencanada.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for itiswrittencanada.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

itiswrittencanada.ca

Other certificates including the domain name itiswrittencanada.ca

(limited to 100 certificates)
*.itiswrittencanada.ca
www.estaescrito.ca
itiswrittencanada.ca
fr.itiswrittencanada.ca
fr.itiswrittencanada.ca
*.itiswrittencanada.ca
www.estaescrito.ca
www.estaescrito.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
*.itiswrittencanada.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
fr.itiswrittencanada.ca
www.itiswrittencanada.ca
fr.itiswrittencanada.ca
www.estaescrito.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
www.estaescrito.ca
fr.itiswrittencanada.ca
itiswrittencanada.ca
www.estaescrito.ca
estaescrito.itiswrittencanada.ca
www.itiswrittencanada.ca
itiswrittencanada.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
www.estaescrito.ca
www.itiswrittencanada.ca
www.dev4iiw.wayneatwood.com
fr.itiswrittencanada.ca
www.estaescrito.ca
www.itiswrittencanada.ca
itiswrittencanada.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
estaescrito.itiswrittencanada.ca
www.estaescrito.ca
www.estaescrito.ca
www.itiswrittencanada.ca
fr.itiswrittencanada.ca
www.estaescrito.ca
www.itiswrittencanada.ca
*.itiswrittencanada.ca
www.itiswrittencanada.ca
itiswrittencanada.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
fr.itiswrittencanada.ca
www.estaescrito.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
fr.itiswrittencanada.ca
itiswrittencanada.ca
www.dev4iiw.wayneatwood.com
itiswrittencanada.ca
itiswrittencanada.ca
www.estaescrito.ca
*.itiswrittencanada.ca
www.estaescrito.ca
www.estaescrito.ca
www.itiswrittencanada.ca
www.estaescrito.ca
itiswrittencanada.ca
www.itiswrittencanada.ca
itiswrittencanada.ca
estaescrito.itiswrittencanada.ca
fr.itiswrittencanada.ca
*.itiswrittencanada.ca
www.estaescrito.ca
www.dev4iiw.wayneatwood.com
itiswrittencanada.ca
www.itiswrittencanada.ca
www.estaescrito.ca
www.itiswrittencanada.ca
www.estaescrito.ca
www.itiswrittencanada.ca
www.estaescrito.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
www.itiswrittencanada.ca
www.estaescrito.ca
www.estaescrito.ca

Certificate

The complete raw certificate details for itiswrittencanada.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGYDCCBUigAwIBAgISA9Yxtzj1GvM29hoNb8GBOhGXMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTYxMjQ5MzFaFw0y
MDAxMTQxMjQ5MzFaMB8xHTAbBgNVBAMTFGl0aXN3cml0dGVuY2FuYWRhLmNhMIIC
IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw7IkoQENqN6W/OP9UvJd8bYh
Y8PVMqYYxtnuKVClUINCExHB1TGwHOq36/0lIp3tp/SwQ88Tmsr7ZiMIbwzk+33U
4d+A4UzCCKhLWJrUCl6D97fat2ma//5u8wanSXn+cvAy5MNJTW17Gh4/vBspTtzG
ct6Ui3NSZwOcGkfZqS8rpSB0mlZPp6j/eEeJ+Wi5RNxavmTohF9CMzyVsOagnq0k
INmeCwvkqxNFlyTF7lE7N4K6vm2ZanRiEsxiSo2u4TgkBHzGwR11bk690dUUvkKU
KOBd1ZXa7U4jj491Jie0drrYiMaohKJJxCnSC5dMazCsjDkxagFb37fDt73HO3h3
UKRmfQ0Jtp2hiE3qK3qZOmesRWIRFGgibe0hS2842BUgfNvzaTuoIUI2yBQhcUYj
TuPifGN0Q8Awe/vxV5S/F3igzFGn1W5ffdCcVN+3YFWPhHFSO3FrsaFvbjaOxpW0
mbgNU+M1WUbUWGtwHQH5F/QaUM9Jc21BpmIFk6hxjV6D4UOJxzM0kPjjk6GrWKr5
YquTFumOPiyobuut9m0PEPdrnvVU2MnYm6no8iEsA4E1uwF6ep7SCoCJz8oLGIxF
WFxWo+gVQBl7nHy17AS0PkEdiUaItjwhWFQfn2HRb+5+D2I6CGpPcdagBkfdeI1Z
grt+HEb4h4UUvV7x0gMCAwEAAaOCAmkwggJlMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQUqjlbZN+05EGuyTy9LRqlKN2Yf/4wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3
pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2Nz
cC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2Vy
dC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAfBgNVHREEGDAWghRpdGlzd3JpdHRl
bmNhbmFkYS5jYTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAo
MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisG
AQQB1nkCBAIEgfUEgfIA8AB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVF
R/R4AAABbdTUsJkAAAQDAEcwRQIgHsU+uiCkwWxZofaX5RtMUa+kLkEe3cNwmANN
+HnfG2ACIQDFrQKmCJp6C+qlnZ8xy8S3gUS92O2wmLgMqXWWgVkRngB2AG9Tdqwx
8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABbdTUsN8AAAQDAEcwRQIhAJoR
WvOrgCbWp2DVzQieAFOpekUqgll8TCmliuieLkPxAiBMSi9PH8ViYX0o3qLOSwuj
SVuFMI5s7MVrdReP4M5btjANBgkqhkiG9w0BAQsFAAOCAQEAJ8ScAQqUqM3s11iw
6ZFNzykiyje9V6LmeLJtTu3dxugRuBOjx32Lg7pygVdv6ZkjAHfxx1RTHYVBkdpU
YjK1ZErkKTrdSth54mDyPuXqyP2i19J5WSh7pilo7wD0QzPmcz4yWzFfWnamtQAA
LY+Guzsx4tmLpBeR+CmxWz2wxyF+Fl42CiSm4AeqB2HLRTuMqEHxKpG6oPGE0u0N
m2sqZfff7RxKOOAnfjGj1nXPQwyTgZIOJv5l4WRD9lPCTjHGTZvB2M5GP5YvKMBL
Ivu18yztHXtNKZ62wR24qMsfdrzTdhFrQ1TiebgoHN8e68bdB3/RAakVTmbR1K9m
EH1MZA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334223367833714322131527566299508967608727
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-16 12:49:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-14 12:49:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'itiswrittencanada.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 798369500946072191533772511313726973536863824681796133551366047900470255087345439169935758547186918879491748416526563796185448935439053610507509376138392849095732927801707720902211692795018543218691565745016238901919059709788921364306466281674421399027546798159281590512563237474898508480807875435282427648496924409100326630211455209487094435618331733025584040840798533438154467854085396665504148174603925183205847675951240179396675837484226673665737658956748536227207271602526346022017615351819776130229213716903296578717346590432169120804445915026050818006479565537352701618962163772492960912782683641454937621767927836405784392481082623771120253573244170636411829049816414617345802312449695746260799573242405127268163969833508862643951299967048588863949357188514901786482553375127938242473746660731137371288377421666254940643727969921791913082033101339241428968283501954666293273242246205877614647513421773815105705935170951012345306142247350279338310028332992969580243407109039197735616072618819613938956143604273871363655442739786179263662067435239866393250862309639157952789374711720804532354281415416128132862451801953150492730533630327957292179210221863661125152311924055894319874798848653729352418707298360422751966126526979
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aa395b64dfb4e441aec93cbd2d1aa528dd987ffe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itiswrittencanada.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dd4d4b099000004030047304502201ec53eba20a4c16c59a1f697e51b4c51afa42e411eddc37098034df879df1b60022100c5ad02a6089a7a0beaa59d9f31cbc4b78144bdd8edb098b80ca975968159119e0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dd4d4b0df00000403004730450221009a115af3ab8026d6a760d5cd089e0053a97a452a82597c4c29a58ae89e2e43f102204c4a2f4f1fc562617d28dea2ce4b0ba3495b85308e6cecc56b75178fe0ce5bb6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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