colostate.pressbooks.pub

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:31:4b:06:92:f0:8f:ff:56:d4:2f:94:08:b0:99:99:8c:17 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=colostate.pressbooks.pub

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:31:4b:06:92:f0:8f:ff:56:d4:2f:94:08:b0:99:99:8c:17
Serial Number (int): 278110420008162870728104043623456892881943
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 46:cf:48:c9:2e:2c:5c:7f:e5:82:6d:05:3e:2d:1b:c6:14:b8:35:ad
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f6:61:a2:47:10:36:a2:a7:9f:6f:f5:d5:dc:e0:cc:7c:81:97:b7:05
Fingerprint (sha256): 91:dc:b0:5d:cd:10:55:85:8c:54:84:c3:66:04:b7:de:52:bc:11:a4:db:58:56:cc:f7:19:1b:96:ad:c5:e4:08

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate colostate.pressbooks.pub

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for colostate.pressbooks.pub

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

colostate.pressbooks.pub

Other certificates including the domain name pressbooks.pub

(limited to 100 certificates)
georgiastateuniversity.pressbooks.pub
campusmanitoba.pressbooks.pub
oregonstate.pressbooks.pub
open.oregonstate.education
northwestern.pressbooks.pub
milnepublishing.pressbooks.pub
pressbooks.claremont.edu
uflorida.pressbooks.pub
colostate.pressbooks.pub
openoregonstate.pressbooks.pub
open.oregonstate.education
senecacollege.pressbooks.pub
caulau.pressbooks.pub
uiowa.pressbooks.pub
montgomerycollege.pressbooks.pub
cuny.pressbooks.pub
libbaylor.pressbooks.pub
origin-lb.client-ap-southeast-2.ap-southeast-2.pressbooks.pub
pressbooks.org
ohiostate.pressbooks.pub
oregonstate.pressbooks.pub
atd.pressbooks.pub
ccbcmd.pressbooks.pub
milnepublishing.geneseo.edu
libumn.pressbooks.pub
umichigan.pressbooks.pub
pressbooks.org
claremont.pressbooks.pub
open.oregonstate.education
pressbooks.org
iu.pressbooks.pub
uregina.pressbooks.pub
openoregonstate.pressbooks.pub
pressbooks.org
pressbooks.org
okstate.pressbooks.pub
umichigan.pressbooks.pub
ku.pressbooks.pub
uva.pressbooks.pub
vt.pressbooks.pub
pressbooks.org
unk.pressbooks.pub
howardcc.pressbooks.pub
ucf.pressbooks.pub
handbook.pressbooks.pub
ku.pressbooks.pub
iu.pressbooks.pub
ukings.pressbooks.pub
iu.pressbooks.pub
pressbooks.org
ohiostate.pressbooks.pub
usask.pressbooks.pub
open.oregonstate.education
cdn.pressbooks.pub
pressbooks.gvsu.edu
cdn.pressbooks.pub
iu.pressbooks.pub
ohiostate.pressbooks.pub
*.pressbooks.pub
*.pressbooks.pub
pressbooks.org
maricopa.pressbooks.pub
ohiostate.pressbooks.pub
colostate.pressbooks.pub
colostate.pressbooks.pub
fortlewis.pressbooks.pub
howardcc.pressbooks.pub
open.online.uga.edu
ohiostate.pressbooks.pub
jmu.pressbooks.pub
erau.pressbooks.pub
oregonstate.pressbooks.pub
colostate.pressbooks.pub
pressbooks.org
caulau.pressbooks.pub
iu.pressbooks.pub
iu.pressbooks.pub
libumn.pressbooks.pub
calstate.pressbooks.pub
pressbooks.gvsu.edu
oregonstate.pressbooks.pub
utrgv.pressbooks.pub
opentextbooks.rug.nl
*.pressbooks.pub
unk.pressbooks.pub
unebraskalincoln.pressbooks.pub
oregonstate.pressbooks.pub
uwmadison.pressbooks.pub
drake.pressbooks.pub
cdn.pressbooks.pub
ohiostate.pressbooks.pub
oregonstate.pressbooks.pub
novagorica.pressbooks.pub
baypath.pressbooks.pub
pennstate.pressbooks.pub
open.oregonstate.education
openoregonstate.pressbooks.pub
open.online.uga.edu
maricopa.pressbooks.pub
uwf.pressbooks.pub

Certificate

The complete raw certificate details for colostate.pressbooks.pub in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgISAzFLBpLwj/9W1C+UCLCZmYwXMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MTgxMjQzMTFaFw0x
OTEyMTcxMjQzMTFaMCMxITAfBgNVBAMTGGNvbG9zdGF0ZS5wcmVzc2Jvb2tzLnB1
YjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANUeNecE95JoM/NoYf7N
oc/jp8VmnejKZTMw0FOHIBxevook5dwVZlERgZzi7a3lOPYKCQpVekNYO/g7IErT
vPZiMG21dDDtXA4tK695CjWge3WB11tKDDxNWFN8suNYVi4IjkpJVkXzMPxfufWB
AR9HeOtiFHT5zxNJQHtRY8+ewdvGgyFz4Tu0GW/nG9dPwzYRu7BOJUnYawI3BUwg
uCXEm3GkOs+1T1foGHysR4HmGpLEE5y7dHmInTshK9Vsml6mPOrgWr16NDKYGk9Z
WEPfRkioaSoE1WZXyf94ZG0lmwLV7wuNXR8Zg7IqZOXjU2R/YMysjcMoeAbKVAl8
oWzOkkXGojZrZmxbujHS4V9+Kj8WbIaRJcdV+EyhBusRqYP1/PCBF/pmYsiNypcw
uoXo1KnW6kS9RmwaiZuoVsGIcbNztxV8uIJZbahlow308qQ2+qvqgegHj/VQzS6N
9SRgK3cFYVBAVciqymoHV22HeNkBtTUUGptAmigqIqDZU3PPchLr6LpL77JR6e0b
glqyyf5oCNskfcAXxau9arUW/CI5/r0CDKib0CIVIXj/rwhSdYaEkRdQdjE9r5Zv
mGUNJJWdGhFp45hRhnKEVF8ZOoXWRkltVHv08xGoGcyNwb77hk1ZcpvunWsbfWBD
iGm4txLOupxZ6rMZHkEi0saVAgMBAAGjggJsMIICaDAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD
VR0OBBYEFEbPSMkuLFx/5YJtBT4tG8YUuDWtMB8GA1UdIwQYMBaAFKhKamMEfd26
5tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDov
L29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDov
L2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wIwYDVR0RBBwwGoIYY29sb3N0
YXRlLnByZXNzYm9va3MucHViMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQB
gt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn
MIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAdH7agzGtMxCRIZzOJU9CcMK//V5C
IAjGNzV55hB7zFYAAAFtRJzU1AAABAMARjBEAiAPr+RRpNe6xVvN3b/YV4fdfh5l
wSPljd6D7m3q2xri5AIga1komUq2dYfGI7PPuKSYMtG8hObjLWAizN3eVo4OchwA
dgBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAW1EnNTxAAAEAwBH
MEUCIQDlZiqoCPdYBRpJPKF4kWPKdJc4ZSDYiEwywV6xidyXIAIgKQv4aFEWSrV1
2UltiOTyilKO3wsEWozNt3fdrVMs/nMwDQYJKoZIhvcNAQELBQADggEBAGiyXvSx
Jvt+PRUhALcEABr1WhXe27oy8SKyhLnCKb7cGfB91XldmVfFCvXAuJm8DZ/Y9Cru
SfUVedlMEkpMUOqu5sxzDpJzx6BUU00eYt9nC74DlRqqbQUaUpOFl2chNKzTo6bJ
H8VeR0fvsZanbY3Nz66yraP9ZhqijMgmVrgXIlmJlkZjakTumdAzVW/xSG1V6yak
YnTnhmLh71pjEnlUHW+Z8IvhEwIrTGT24CW6nTjoJco3Cr5MUv5sLJCi2ViBXlhq
xHUmH4F5xykZm+BGA0XWbPHgqgbckm89Z4qC15RWCCuDnoeMK60T/gSfH8ilPf2M
SHILW78eOE3FZww=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278110420008162870728104043623456892881943
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-18 12:43:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-17 12:43:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'colostate.pressbooks.pub'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 869445625226210163059238300733643291722566367334121814523362684236537540078095624505038875831691013627194847614435131137654713842990645846304114415283752197347158735101004158411964662871251816153114768975658081148877656040964539633066223461969319126184124543744948579696413700194243680270452851640473386607267668432904652222159295705853097659524032007542429355072456930690352422989124820383849882114138221178038457039241699507715850937618533972196859255076394118659490078363263187750750327747550909926556539978029069725249819559452801388428470118246201988405554146456739943540132294061212161653346902051570725231334582868791420453913901262116001666561340934536258049657741891889366234868724821160279637496855465594545513964976738561902184126022482557285091575081056914642554764426721141935896112500094199103427269769968641105378404797179251727204991922664999862931372949789965395980046542965996460071317000213543250020465465390864894450278489261393115729458896949871742838285076083403657463564965217044791705080456490857414485134376715597759091025144573574046467219099996697722475582806821795018091083317821782938216564435217401554657240930271707464843909492677492934429666323755617682705330243675894282478340318496742422586848364181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							46cf48c92e2c5c7fe5826d053e2d1bc614b835ad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colostate.pressbooks.pub'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d449cd4d4000004030046304402200fafe451a4d7bac55bcdddbfd85787dd7e1e65c123e58dde83ee6deadb1ae2e402206b5928994ab67587c623b3cfb8a49832d1bc84e6e32d6022ccddde568e0e721c00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d449cd4f10000040300473045022100e5662aa808f758051a493ca1789163ca7497386520d8884c32c15eb189dc97200220290bf86851164ab575d9496d88e4f28a528edf0b045a8ccdb777ddad532cfe73
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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