tls.automattic.com

Issued by R3

About this certificate

This digital certificate with serial number 04:de:8c:27:d1:55:aa:8b:66:12:3b:eb:55:f3:b1:ca:fc:7e was issued on by Let's Encrypt.

With 46 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tls.automattic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:de:8c:27:d1:55:aa:8b:66:12:3b:eb:55:f3:b1:ca:fc:7e
Serial Number (int): 424178127848287478507136689218548027554942
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f2:ad:c4:a5:ea:b1:37:14:d5:09:50:bc:eb:be:44:56:55:a8:3f:d0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b2:3f:e9:f6:38:57:4c:7f:df:d6:56:e6:46:7b:db:c2:69:be:20:92
Fingerprint (sha256): a5:5c:84:4a:21:56:c1:55:5c:df:a6:35:42:ae:bf:e6:7b:38:2f:e2:00:2e:61:e4:9e:ba:da:f0:6f:f2:57:d1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tls.automattic.com

46

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tls.automattic.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oncampus.events
reclaimingyourcastle.com
reclaimthewarrior.com
reclothe.me
recognizerealize.com
recollecteddesign.com
recoveringhoarder.com
recoveringminnesotan.com
redchairchronicles.com
redcircleink.com
reddresstheology.com
redeagleslegacy.com
redeclectica.com
redeemedandredirected.com
redeemerlutheranbaltimore.org
redeemerrrmusic.com
sinfulseductress.com
therevperez.com
tls.automattic.com
truthanddiscernment.com
writers-desk.com
www.oncampus.events
www.privateseal.water.blog
www.reclaimingyourcastle.com
www.reclaimthewarrior.com
www.recohight.com
www.recollecteddesign.com
www.recoveringfed.com
www.recoveringgirl.com
www.redcatkid.com
www.redcatpainting.com
www.redcedarlearningcoop.org
www.redchairchronicles.com
www.reddragoncordova.org
www.reddytoread.com
www.redeagleslegacy.com
www.redearedrabbit.com
www.redearthtemple.com
www.redeemedandredirected.com
www.redeemedredhead.com
www.thrillwriters.com
www.tourismsustainability73418697.com
www.travellingtohappiness.blog
www.travfroding.com
www.yvetteledezma.com
yvetteledezma.com

Other certificates including the domain name automattic.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com

Certificate

The complete raw certificate details for tls.automattic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEi3+HM5L83XMk9SZCLSzIb8x9FHMX
DDazJr1GM2JM0ek7PxniVkBTzk8GVV2q56a/ngyaBrJQfeRcj2VoN4GsGQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 424178127848287478507136689218548027554942
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-24 23:47:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-24 23:46:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tls.automattic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00048b7f873392fcdd7324f526422d2cc86fcc7d1473170c36b326bd4633624cd1e93b3f19e2564053ce4f06555daae7a6bf9e0c9a06b2507de45c8f65683781ac19
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f2adc4a5eab13714d50950bcebbe445655a83fd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1094 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oncampus.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reclaimingyourcastle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reclaimthewarrior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reclothe.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recognizerealize.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recollecteddesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveringhoarder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recoveringminnesotan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redchairchronicles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redcircleink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reddresstheology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redeagleslegacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redeclectica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redeemedandredirected.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redeemerlutheranbaltimore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redeemerrrmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sinfulseductress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therevperez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tls.automattic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truthanddiscernment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'writers-desk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oncampus.events'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privateseal.water.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reclaimingyourcastle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reclaimthewarrior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recohight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recollecteddesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoveringfed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recoveringgirl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redcatkid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redcatpainting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redcedarlearningcoop.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redchairchronicles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddragoncordova.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reddytoread.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redeagleslegacy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redearedrabbit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redearthtemple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redeemedandredirected.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redeemedredhead.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thrillwriters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tourismsustainability73418697.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travellingtohappiness.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travfroding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yvetteledezma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yvetteledezma.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dddbac121000004030046304402207f4bc4ffd75bebc369d707dc7d2bb274b8e2c8f783a5b80a49697deac50e78a902207b3338eb3dc4f2c5c4aa2010b8bc3232a4563a01081ff876328a2ce2a69f087e007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018dddbac16b0000040300483046022100a3c4810e0e79255f47303027a146a8836b637400c6a7831a35f12ca5b0a6e48602210080628befe9399567058276a2bb6d0c31b2b45573077b0360c672078a8b4168f7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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