blogi.keuda.fi

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:88:1f:d2:05:00:62:b7:1e:ad:71:99:8f:59:4f:2b:b4:86 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=blogi.keuda.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:88:1f:d2:05:00:62:b7:1e:ad:71:99:8f:59:4f:2b:b4:86
Serial Number (int): 307657556248180594604268954897279120815238
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2c:c7:c1:1d:58:5d:b5:86:ab:e9:f7:fa:06:f6:11:5a:2e:6c:27:69
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ae:ec:11:72:0a:79:54:3d:a2:66:3c:23:9d:c4:c9:9f:2e:83:7d:dd
Fingerprint (sha256): 9c:79:5c:60:7e:6c:e1:03:49:cf:d2:2a:47:98:46:bc:37:64:0e:14:1a:6a:d6:57:4c:9c:f8:f5:67:59:23:8f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate blogi.keuda.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blogi.keuda.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blogi.keuda.fi

Other certificates including the domain name keuda.fi

(limited to 100 certificates)
blogi.keuda.fi
opiskelija.keuda.fi
yrityksille.keuda.fi
blogi.keuda.fi
ky-fed.keuda.fi
opiskelija.keuda.fi
webmail.keuda.fi
keuda-sr.keuda.fi
keuda.fi
pinja.keuda.fi
winha.keuda.fi
dynasty.keuda.fi
ky-fed.keuda.fi
opiskelija.keuda.fi
opiskelija.keuda.fi
webmail.keuda.fi
yrityksille.keuda.fi
yrityksille.keuda.fi
keuda.fi
dynasty.keuda.fi
opiskelija.keuda.fi
oppisopimus.keuda.fi
opiskelijaintra.keuda.fi
opiskelijaintra.keuda.fi
wiki.keuda.fi
keuda-adhk.keuda.fi
keuda.fi
opiskelija.keuda.fi
ims.keuda.fi
opiskelijakeuda.focusflow.net
wiki.keuda.fi
yrityksillekeuda.focusflow.net
blogi.keuda.fi
opiskelijaintra.keuda.fi
yrityksille.keuda.fi
yrityksille.keuda.fi
keuda.fi
web.keuda.fi
opiskelija.keuda.fi
yrityksillekeuda.focusflow.net
yrityksille.keuda.fi
winha.keuda.fi
ims.keuda.fi
oppisopimus.keuda.fi
ims.keuda.fi
mfiles.keuda.fi
ky-fed.keuda.fi
www.keuda.fi
opiskelija.keuda.fi
ky-fed.keuda.fi
dynastyweb.keuda.fi
winha.keuda.fi
keuda.fi
yrityksille.keuda.fi
keuda.fi
opiskelija.keuda.fi
opiskelija.keuda.fi
blogi.keuda.fi
blogi.keuda.fi
keuda-dw.keuda.fi
verkkokauppa.keuda.fi
oppisopimus.keuda.fi
verkkokauppa.keuda.fi
wiki.keuda.fi
blogi.keuda.fi
web.keuda.fi
blogi.keuda.fi
dynasty.keuda.fi
yrityksille.keuda.fi
yrityksille.keuda.fi
blogi.keuda.fi
sts.keuda.fi
oppisopimus.keuda.fi
oppisopimus.keuda.fi
yrityksille.keuda.fi
opiskelija.keuda.fi
opiskelijaintra.keuda.fi
yrityksille.keuda.fi
dynastyweb.keuda.fi
keuda.fi
yrityksille.keuda.fi
mfiles.keuda.fi
www.keuda.fi
opiskelija.keuda.fi
opiskelija.keuda.fi
opiskelijakeuda.focusflow.net
winha.keuda.fi
ky-fed.keuda.fi
ims.keuda.fi
ky-fed.keuda.fi
mfiles.keuda.fi
ky-fed.keuda.fi
web.keuda.fi
oppisopimus.keuda.fi
web.keuda.fi
web.keuda.fi
verkkokauppa.keuda.fi
intra.keuda.fi
yrityksille.keuda.fi

Certificate

The complete raw certificate details for blogi.keuda.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVjCCBT6gAwIBAgISA4gf0gUAYrcerXGZj1lPK7SGMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MjcwNzM4MTRaFw0x
OTEyMjYwNzM4MTRaMBkxFzAVBgNVBAMTDmJsb2dpLmtldWRhLmZpMIICIjANBgkq
hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7fm2Zhoe8EZNMdW5P/NDSi9e4Rv6k3pF
9m6JuSqfI59B5FaG2pa1TUJCzBrsz0uGimDXKqFgXr5Pc7eQNn73GX5+vB63ZlE0
DgHQUTVTf5OZjHiTNC+TMx/5jxrOyNZfIZ2jbvAk/C+7ePv5U1UR/eM1ZPjjYJ/R
dHAagTHq/UQKo+6//ZBX36FAydabqg77DhtoKGuFnR+OZGh+OlrLtk+gTbrXPA8t
OMvslUvp7egbdGwTloKVnkd9X3LylcpwsLr/JujMDmQNbrJben1rpGP43OCIOLH8
8PWyOMdVn82LkLs74UiyG0VEBRHANc0Ns9d5EBvwjEcrXDHl3k6/pAP0jC3juHR3
l8IQTCrQxt0KaeUXbmCRZM8n9roe/b794h4IdJCByWMz2+kZc6C5Ui2UO17PsOa9
Fbla5lWSNg217j8nRQkITt2+sKP4YiQK5r1d+uNxBKZUu4OgaZE5BJwj9FpKe1/d
j9g0GJiYCSQJg1aXpON1r1fACZyvQvAATVAlGu2ygn3K7k1UmBlL8QWb4bfNgPjF
M6nA8qKMRCQ35wPxr1eYdC0lIHhrNaodVzcQyj9Ru2EHQHqEFG0M1IpJu9q/TMwR
0EW1bWWw396wJOBHpOv8PYfqSoOCnXvJ3gi2MbGNVGFxWarccalG0NFi5nA3/2K1
OumzAycmjgsCAwEAAaOCAmUwggJhMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQULMfB
HVhdtYar6ff6BvYRWi5sJ2kwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo
7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREEEjAQgg5ibG9naS5rZXVkYS5maTBM
BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB
FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQYGCisGAQQB1nkCBAIEgfcE
gfQA8gB3AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABbXHe31gA
AAQDAEgwRgIhAPK8f0LPBaKzyiHDArP5t/TlAdGbFaRnSREBl82jHWrdAiEAlDe2
gbHJlb3HVbgB1GV9/D7s6nOPj7lWrki7m+5xuN8AdwBj8tvN6DvMLM8LcoQnV2sz
pI1hd4+9daY4scdoVEvYjQAAAW1x3t4UAAAEAwBIMEYCIQDUNoMtf17fGZEdU6in
FDtjQnrUOSJEZIj3HU7BufFjZQIhAPHeDR/kSEnglUJVFuMaYLR9c/tlMinlPkDT
tggNvxUSMA0GCSqGSIb3DQEBCwUAA4IBAQB1qNi5Jii/TqqqMNRr8rolkfLdFZPa
ykWDRC0ecXhOo6tLGLAiQHaAmpkYieYWcrIEAwTlSbFu6mUDX5Hr16QBS+f8aU0j
R2AdTDjI9+QKwVEGXeudlMtL1YA0fAcSENWFPdESc/GuftnvPOVD3ag8qRijhSgL
rR6TV52vpVUhfywzrdHecZK4ZFPPZqe3mrNyYkrhj38hZlU3Wn76AK6LyoMBDqoY
geGGGf0Ie07pYT0K3icJyO7BS73enodTkU3JhzDZEnNpM0GTeOoMNSc2n333Arav
BewTOAi82L5pX2zLACc1b25PMAKUEpyaqM39ZWy7hpAZNNdlXDqgMHSF
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307657556248180594604268954897279120815238
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-27 07:38:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-26 07:38:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blogi.keuda.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 970855089826969317798175303982909285198723472360614656800614427007425634386823997471881607673548567244072055607323184638268710089735480573405479069102786019463869017756303600119270950626562645630333486321277243415550875064166472461757321368056456933803012471429324731554116267221426382920428212366791914821212188945490284369452599892507324750125340145080972608895572872408152336379068019565566069920358760962771572122564234939299980170516548150753561075219332415172999499632886144232838509481732979611977560411357426863950913833777472276917942303458795207255384503617391591154473014561434134027107015593118050664971068430283963252620809083859204115367650852910906374693788291498222632587775004235558911284432234606468837776272968184590886400388205679060770298843093830178685639026280454648987701891569211041139975529206216936766509785386525479070897541891601618142520508073658416817615016380576587138568358699658702679259841128068938960408406632028877253248760658490579554794167578103140736571248601876533083796408531917316480780905326366180737128656093232256253084468477674552339094275062097649164658638778061551765935378381300813093626572805301233535690553098106107238901955132374387730978217782492440123852786666924599973062807051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2cc7c11d585db586abe9f7fa06f6115a2e6c2769
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogi.keuda.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d71dedf580000040300483046022100f2bc7f42cf05a2b3ca21c302b3f9b7f4e501d19b15a46749110197cda31d6add0221009437b681b1c995bdc755b801d4657dfc3eecea738f8fb956ae48bb9bee71b8df00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d71dede140000040300483046022100d436832d7f5edf19911d53a8a7143b63427ad43922446488f71d4ec1b9f16365022100f1de0d1fe44849e095425516e31a60b47d73fb653229e53e40d3b6080dbf1512
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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