rfmaska.coop

Issued by R3

About this certificate

This digital certificate with serial number 04:fd:d5:4d:c1:32:d3:f4:24:a3:a4:50:5d:a0:0e:87:bb:b5 was issued on by Let's Encrypt.

With 55 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=rfmaska.coop

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:fd:d5:4d:c1:32:d3:f4:24:a3:a4:50:5d:a0:0e:87:bb:b5
Serial Number (int): 434824111846530770223867032656625583766453
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 23:12:f5:23:c4:f3:11:79:a9:70:7f:1a:0c:1d:46:51:d6:85:cf:a2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 08:9c:a4:7d:c7:e6:65:9f:46:80:a4:3f:43:d5:2b:cd:54:9a:ef:12
Fingerprint (sha256): 9a:95:21:9c:c7:93:23:8b:e2:81:76:d1:4d:88:96:94:7d:91:69:4b:b3:58:dc:5e:a3:a0:06:b4:aa:b5:3a:c5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate rfmaska.coop

55

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rfmaska.coop

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

afdr.coop
cfgrandmontreal.com
cfhcn.ca
cfmm.coop
cfo.coop
cftemiscamingue.com
cimetiere.coop
coopfbrunet.com
coopfuneraire2rives.com
coopfuneraireestrie.com
coopfunerairelaurentides.org
eauxvives.ca
fcfq.coop
fcfq.qc.ca
fjord.coop
jhfleury.com
lagentiane.org
mail.eauxvives.ca
mail.fcfq.qc.ca
mail.rfmaska.coop
maisonrobertetfils.com
maisonsfunerairesblais.com
mfamiante.coop
perrinfuneralchapel.com
residence-funeraire.coop
residencefunerairelacstjean.com
rfmaska.coop
salonfunerairecoaticook.com
timiskamingfc.com
www.afdr.coop
www.cfgrandmontreal.com
www.cfhcn.ca
www.cfmm.coop
www.cfo.coop
www.cftemiscamingue.com
www.cimetiere.coop
www.coopfbrunet.com
www.coopfuneraire2rives.com
www.coopfuneraireestrie.com
www.coopfunerairelaurentides.org
www.eauxvives.ca
www.fcfq.coop
www.fcfq.qc.ca
www.fjord.coop
www.jhfleury.com
www.lagentiane.org
www.maisonrobertetfils.com
www.maisonsfunerairesblais.com
www.mfamiante.coop
www.perrinfuneralchapel.com
www.residence-funeraire.coop
www.residencefunerairelacstjean.com
www.rfmaska.coop
www.salonfunerairecoaticook.com
www.timiskamingfc.com

Other certificates including the domain name rfmaska.coop

(limited to 100 certificates)

Certificate

The complete raw certificate details for rfmaska.coop in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbHoZ+Iqu28ce+yVHIF2
7/MEnrY77ZQ9D6q92AR2KRFt+Q4P1kxPRS8TXtoD40JjSNEYtzYClCNHnBnZi93K
KkWwFnmHQa96CC6jk3rnI1+wbGu1Wb8gnfYQHP9UWwA7nAoMNYSePaaV8g61r9ov
DD/9hvm8ib2zzO43VOhgnbKYFn6eQebbOcr2/aFHj7D9JX9+CidVyp9xf22oCKKF
pAKmLvKQFg63m82ZCO9+o29AZfnHoeSYf+g7ydwszNDgtVfsU4gc7KL4njDNffqU
w+mF+dmxOYNec5SWZLlyrNT8f1kI1LT5Uvo2GZtFVwPPbFjdbq7gnTgXW+3Dv+ai
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 434824111846530770223867032656625583766453
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-12 13:30:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-11 13:30:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rfmaska.coop'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23946769261818413803391702952376396124775455983798653813155093752409110856455121266358028311601007442407929171239486899211522517304778072377503922060474380086343844593636196799262585788918454380041216274884342494026308616959339996858150541399071130607988156808840256703366952050343295217664139157732560774032051786813573783433008973640857134173762820123002325588354299365966419258678722143891749750588637087981340040734557125551246763190886894582937611024848554196157208214994883871910873681964913255282610058193062323951187388737033070364055898920008417243624980478843323442077269685054205870533202596547965277872721
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2312f523c4f31179a9707f1a0c1d4651d685cfa2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1143 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afdr.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfgrandmontreal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfhcn.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfmm.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfo.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cftemiscamingue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cimetiere.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coopfbrunet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coopfuneraire2rives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coopfuneraireestrie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coopfunerairelaurentides.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eauxvives.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcfq.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcfq.qc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fjord.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhfleury.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagentiane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.eauxvives.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.fcfq.qc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.rfmaska.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maisonrobertetfils.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maisonsfunerairesblais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfamiante.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perrinfuneralchapel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'residence-funeraire.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'residencefunerairelacstjean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rfmaska.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salonfunerairecoaticook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timiskamingfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afdr.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cfgrandmontreal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cfhcn.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cfmm.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cfo.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cftemiscamingue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cimetiere.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coopfbrunet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coopfuneraire2rives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coopfuneraireestrie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coopfunerairelaurentides.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eauxvives.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fcfq.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fcfq.qc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fjord.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhfleury.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lagentiane.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maisonrobertetfils.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maisonsfunerairesblais.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mfamiante.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perrinfuneralchapel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.residence-funeraire.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.residencefunerairelacstjean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rfmaska.coop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.salonfunerairecoaticook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timiskamingfc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cfe14bf7e0000040300483046022100b3448efd788b2998ebd55a4ed611d5c4bae6703848b7b129101f70d751c17f4b0221009de9d703226f4c7fb165e95348b6fb686bc3e442fa94baa5a39d2226b5b8f464007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018cfe14bf59000004030047304502210091113f26fa58e2dab42d0772130961ea0815abf32373981c31169149e7b68ad8022051122b3414aec4247421292ab9fd794be595d97e9313dfbd43b5ab5072afec1f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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