oysterbake.org

Issued by R11

About this certificate

This digital certificate with serial number 03:11:43:d4:0f:b9:11:dd:6c:9f:f6:6f:90:98:96:48:0c:d7 was issued on by Let's Encrypt.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=oysterbake.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:11:43:d4:0f:b9:11:dd:6c:9f:f6:6f:90:98:96:48:0c:d7
Serial Number (int): 267211817394487175616344296913911232859351
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b6:6a:a8:46:05:8a:f4:8f:bc:87:32:96:d0:f6:27:b2:8e:b1:f5:5a
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): c3:ca:bc:2e:07:73:62:43:06:5d:1f:7a:2f:a4:f7:bc:6d:ac:a9:d6
Fingerprint (sha256): 9a:5c:86:f8:7d:e6:f0:76:b5:ab:13:10:13:ad:c9:a4:fe:01:07:99:df:d8:38:b5:26:92:b9:3d:92:31:67:a3

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate oysterbake.org

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oysterbake.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arbitragemarkets.co.uk
ashevillelawyer.com
boarmeat.com
captivaislandfl.com
captivavillage.com
casavatore.com
ccnewhome.com
cryptopayexchange.com
downtownboulder.net
friarspoint.com
logancrum.com
metroeastvillas.com
noprepbrownie.com
ochiltreecounty.com
oysterbake.org
pure-adventures.co
purepulse.com
rxsugarprobiotics.com
s1magazine.com
sturgisgarbage.com
www.theartofprivateinvesting.com

Other certificates including the domain name oysterbake.org

(limited to 100 certificates)
oysterbake.org
oysterbake.org
oysterbake.org
vosei.com.pch.vc
catholicyouth.bible
frfi.ie

Certificate

The complete raw certificate details for oysterbake.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGfjCCBWagAwIBAgISAxFD1A+5Ed1sn/ZvkJiWSAzXMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTEwHhcNMjQwNjA4MTM0OTA2WhcNMjQwOTA2MTM0OTA1WjAZMRcwFQYDVQQD
Ew5veXN0ZXJiYWtlLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AOMluVXhpvu/3eI2YpydWhlLjmazaWcYmY8ucSlRsJ6GfT5jPiKzf2joo9nt6DM3
dPBjYZtV4scdgOQo7oJfU70nxPOqO23/4B+kyCEy+R0knQsfG4j1S0a5pFfZJejD
fQiv2otiYhK6suFb1gxkAY8MymSkrSc7Hd5c6kPxKAnMgbilhBWxDGRXq2dkeLyI
NP2jVkNbHOOArWC47tcvcDPjBk6mpQh/5dWyh1hNbmv6nWePcqWwU+G+fnmOnJ6I
fsw7GBbNSAsFB8eTDHRz71X0ypoKyNZBy9raF1qTTk3cILUB9PW80weG1fXwmoPU
CZ/KjpYkbsehKgeoB/tAl9kCAwEAAaOCA6QwggOgMA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV
HQ4EFgQUtmqoRgWK9I+8hzKW0PYnso6x9VowHwYDVR0jBBgwFoAUxc9GpOr0w8B6
bJXELbBeki8m47kwVwYIKwYBBQUHAQEESzBJMCIGCCsGAQUFBzABhhZodHRwOi8v
cjExLm8ubGVuY3Iub3JnMCMGCCsGAQUFBzAChhdodHRwOi8vcjExLmkubGVuY3Iu
b3JnLzCCAakGA1UdEQSCAaAwggGcghZhcmJpdHJhZ2VtYXJrZXRzLmNvLnVrghNh
c2hldmlsbGVsYXd5ZXIuY29tggxib2FybWVhdC5jb22CE2NhcHRpdmFpc2xhbmRm
bC5jb22CEmNhcHRpdmF2aWxsYWdlLmNvbYIOY2FzYXZhdG9yZS5jb22CDWNjbmV3
aG9tZS5jb22CFWNyeXB0b3BheWV4Y2hhbmdlLmNvbYITZG93bnRvd25ib3VsZGVy
Lm5ldIIPZnJpYXJzcG9pbnQuY29tgg1sb2dhbmNydW0uY29tghNtZXRyb2Vhc3R2
aWxsYXMuY29tghFub3ByZXBicm93bmllLmNvbYITb2NoaWx0cmVlY291bnR5LmNv
bYIOb3lzdGVyYmFrZS5vcmeCEnB1cmUtYWR2ZW50dXJlcy5jb4INcHVyZXB1bHNl
LmNvbYIVcnhzdWdhcnByb2Jpb3RpY3MuY29tgg5zMW1hZ2F6aW5lLmNvbYISc3R1
cmdpc2dhcmJhZ2UuY29tgiB3d3cudGhlYXJ0b2Zwcml2YXRlaW52ZXN0aW5nLmNv
bTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2
AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABj/hTGO0AAAQDAEcw
RQIgY3fYjhqRs5Sson6NyFPAhUK0i86H4mHyF5ML6xHwzgsCIQD8HqsWsQRMKogq
cDA4Svo8PC5EVbT7m8KuaTJFVtqjcQB2AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq
68G/KIXs+GRuAAABj/hTGPcAAAQDAEcwRQIhANP4o4zj+NM8J2yez8s7J5YkEJDP
snv/knCDd+ZvsoNUAiBDNUKxXYToQ+7gDDpyMeTRVFDCE5llU0LYwH++Q1WVTTAN
BgkqhkiG9w0BAQsFAAOCAQEAJqgTlmGy45ubwgUTqvbz9v2QXHCyFKu9EA8M8y03
OBeJLPOmQ6/UNKYnDfj9lF26GvR5ZweUH/oC3BAoeNB5O618orSvcACqrxylaZ8R
yMDQIu2VeZUQsc03UwL3uHQ4eiJo0p51A3hCx91oeQ+SRui0al1uJz9W9x9QzpsA
MTSuuk7suG5w5VSbA+iLUb1Tg2EHfhHy+z/5GedxvI4cbArp5PN5Ue/VHp53XUlH
hSpLford85gbt2FAFUYM3xWXIrdujKNQyD89ts8cI+7aD+y8G6qE++XbFdVACkPd
FxZ+z6CZwgsHjPH3A1mtAeuHukuITi58nHk0JTLO5ahafg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yW5VeGm+7/d4jZinJ1a
GUuOZrNpZxiZjy5xKVGwnoZ9PmM+IrN/aOij2e3oMzd08GNhm1Xixx2A5Cjugl9T
vSfE86o7bf/gH6TIITL5HSSdCx8biPVLRrmkV9kl6MN9CK/ai2JiErqy4VvWDGQB
jwzKZKStJzsd3lzqQ/EoCcyBuKWEFbEMZFerZ2R4vIg0/aNWQ1sc44CtYLju1y9w
M+MGTqalCH/l1bKHWE1ua/qdZ49ypbBT4b5+eY6cnoh+zDsYFs1ICwUHx5MMdHPv
VfTKmgrI1kHL2toXWpNOTdwgtQH09bzTB4bV9fCag9QJn8qOliRux6EqB6gH+0CX
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267211817394487175616344296913911232859351
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-08 13:49:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-06 13:49:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oysterbake.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28674697608593840840383347529150555344622020568098901331577426201327964612586267345856943289621064455975932394727019884199558152125218169555684520924026954221166304755904157685090719635766139430982342115686466328581422785505220914663305397003369489306002619895693799435658275166654784479940996991767936650528630327744696025478924328924128933273583184377571330415917339235427023808204716522734641414773525940352669915992540367253041414540430916479516184627098885564778966260864245303221521644134830240236639650977491461646816522947276398368866153623703757543958348234492806151846176679703036647002461034082702372935641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b66aa846058af48fbc873296d0f627b28eb1f55a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (416 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragemarkets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashevillelawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boarmeat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captivaislandfl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captivavillage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casavatore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccnewhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptopayexchange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downtownboulder.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friarspoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logancrum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metroeastvillas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noprepbrownie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ochiltreecounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oysterbake.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pure-adventures.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purepulse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxsugarprobiotics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sturgisgarbage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theartofprivateinvesting.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ff85318ed000004030047304502206377d88e1a91b394aca27e8dc853c08542b48bce87e261f217930beb11f0ce0b022100fc1eab16b1044c2a882a7030384afa3c3c2e4455b4fb9bc2ae69324556daa3710076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ff85318f70000040300473045022100d3f8a38ce3f8d33c276c9ecfcb3b2796241090cfb27bff92708377e66fb283540220433542b15d84e843eee00c3a7231e4d15450c21399655342d8c07fbe4355954d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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