portal.slafoundation.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:59:f0:6b:20:8c:b9:2e:17:2c:33:a8:7f:81:f6:39:27:2e was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=portal.slafoundation.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:59:f0:6b:20:8c:b9:2e:17:2c:33:a8:7f:81:f6:39:27:2e
Serial Number (int): 379053845337943113386474024679730084128558
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a6:b4:e3:f9:84:36:29:c1:07:c0:5a:8e:62:47:33:30:62:b2:de:26
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c0:6c:43:8b:03:91:14:e2:da:3d:69:ef:9e:fd:d0:f2:d8:64:3c:c8
Fingerprint (sha256): a6:99:9d:0c:f2:36:ac:58:6c:52:c5:70:3d:b3:a9:5c:c4:49:aa:7f:6a:9d:f4:6f:42:fa:e5:78:ed:ed:b5:9e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate portal.slafoundation.com

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.slafoundation.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

act.mafiact.com
app-dbds.dylanhodge.com
app.saautopilot.com
calllogs.volfsystem.co.uk
decode.compliancemanager.app
e21ok7e.cheggindia.com
nmina.compliancemanager.app
npassets.access-networks.co.nz
portal.slafoundation.com
support.dsncon.de
wuf.europeanaccounting.net
www.eccosphere.work
www.studentportal.asiaexchange.org

Other certificates including the domain name slafoundation.com

(limited to 100 certificates)
portal.systematicqms.com
slafoundation.com
wuf.europeanaccounting.net
support.dsncon.de
www.slafoundation.com
ping.briotix.works
slafoundation.com
slafoundation.com
ping.briotix.works
slafoundation.com
slafoundation.com
www.slafoundation.com
patients.bay-street-medical.com
rkoi.ialphal.com
slafoundation.com
www.slafoundation.com
slafoundation.com
www.slafoundation.com
slafoundation.com
wuf.europeanaccounting.net
slafoundation.com
support.dsncon.de
slafoundation.com
slafoundation.com
www.slafoundation.com
slafoundation.com
slafoundation.com
slafoundation.com
portal.slafoundation.com
wuf.europeanaccounting.net
cardio.pgicardio.in.net
www.slafoundation.com
ping.briotix.works
wec.azai.co
wuf.europeanaccounting.net
www.slafoundation.com
abe.lincoln-personnel.com
www.slafoundation.com
wuf.europeanaccounting.net
www.slafoundation.com
www.weport.com.au
slafoundation.com
echt.softadel.com
support.dsncon.de
slafoundation.com

Certificate

The complete raw certificate details for portal.slafoundation.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGpTCCBY2gAwIBAgISBFnwayCMuS4XLDOof4H2OScuMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MTkwMjAwMzhaFw0x
OTEwMTcwMjAwMzhaMCMxITAfBgNVBAMTGHBvcnRhbC5zbGFmb3VuZGF0aW9uLmNv
bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOOKIJn/Zuy5PgBHu9qN
F4vQiSflG+aHiTSVSyT6BoieKtn4UbqRyjtsPOhTFzFOyL+ciWpddWso+bLJJWqH
Gxp76YqqOSzjuZESdULut+jMek6kqTdeTdwhAQMjwUf4S5qKuUrwIPsz0V5yopCb
s08tuqojstIxhOXYmpaKRr1r9lAOE0ZxiOzc9wtD35HTtmq5X2HHG1Q3DY2J7m8B
NDiuTU47c8Kkhjbt5RWZxptLslDXNnTn5SmKsBYACLNc/uwCEPOO9e/XfSq6YCfe
vQyxc/a3RbeN13CbUH1MMku+Pp9EH+0nttAAzX2KCCWXOZcJrsklMg2jjDP/Pb6o
I4sCAwEAAaOCA6owggOmMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUprTj+YQ2KcEH
wFqOYkczMGKy3iYwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI
KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0
c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0
c2VuY3J5cHQub3JnLzCCAVwGA1UdEQSCAVMwggFPgg9hY3QubWFmaWFjdC5jb22C
F2FwcC1kYmRzLmR5bGFuaG9kZ2UuY29tghNhcHAuc2FhdXRvcGlsb3QuY29tghlj
YWxsbG9ncy52b2xmc3lzdGVtLmNvLnVrghxkZWNvZGUuY29tcGxpYW5jZW1hbmFn
ZXIuYXBwghZlMjFvazdlLmNoZWdnaW5kaWEuY29tghtubWluYS5jb21wbGlhbmNl
bWFuYWdlci5hcHCCHm5wYXNzZXRzLmFjY2Vzcy1uZXR3b3Jrcy5jby5ueoIYcG9y
dGFsLnNsYWZvdW5kYXRpb24uY29tghFzdXBwb3J0LmRzbmNvbi5kZYIad3VmLmV1
cm9wZWFuYWNjb3VudGluZy5uZXSCE3d3dy5lY2Nvc3BoZXJlLndvcmuCInd3dy5z
dHVkZW50cG9ydGFsLmFzaWFleGNoYW5nZS5vcmcwTAYDVR0gBEUwQzAIBgZngQwB
AgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRz
ZW5jcnlwdC5vcmcwggEGBgorBgEEAdZ5AgQCBIH3BIH0APIAdwDiaUuuJujpQAno
hhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAWwILKI/AAAEAwBIMEYCIQCcWXHdm8o4
9cGpiJUeUeQAkBqorzcvSS33i10sUFgrSwIhAN5ntm26xhtWvA1HBnJ3/SbRK1Co
h3DG6rnLDOXPByvjAHcAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL2I0A
AAFsCCyiQQAABAMASDBGAiEA4bDtI9uu+KYMgdDeo6FGwpTgTyWob6H30iIT+CX3
Z/oCIQCu+2g/E3DcRclM0S4r3supw0Btx2+OKIoPEscc37IwMDANBgkqhkiG9w0B
AQsFAAOCAQEAQ+oUHcSn5ei1IHPWlB6QSi/yAwmMkl8E/Ly+3bzJhruxC0J0s27s
eKZYvdJjDNHL5+n5wYweilMvsiujMJUZOzwtN/6/+PRmSsjE6cS42WhOlwo2jhyy
7pau5agPYlcasC+W5yGVGDHLTPM6XRrXYZpXSfWMU23Hf10C7aeru7j/IPoQOYxD
lAc0ozniqr9cuHf/9+fuWMduRsGXqsoxCaW8L/Q1bAxit/csSrhZi80aQcIQ3eG5
g4NosVGLjOVFU4bkZm3YzlGO7gCirJ1LqQqwwzYQXSoi8F50tVDDKb5+nxe84rxg
U8g+QjlOyhb4g7alGc1ewvIe74oKbMUfAg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44ogmf9m7Lk+AEe72o0X
i9CJJ+Ub5oeJNJVLJPoGiJ4q2fhRupHKO2w86FMXMU7Iv5yJal11ayj5ssklaocb
Gnvpiqo5LOO5kRJ1Qu636Mx6TqSpN15N3CEBAyPBR/hLmoq5SvAg+zPRXnKikJuz
Ty26qiOy0jGE5dialopGvWv2UA4TRnGI7Nz3C0PfkdO2arlfYccbVDcNjYnubwE0
OK5NTjtzwqSGNu3lFZnGm0uyUNc2dOflKYqwFgAIs1z+7AIQ847179d9KrpgJ969
DLFz9rdFt43XcJtQfUwyS74+n0Qf7Se20ADNfYoIJZc5lwmuySUyDaOMM/89vqgj
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 379053845337943113386474024679730084128558
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-19 02:00:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-17 02:00:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.slafoundation.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28724208362101800875028178816570629150930086288557917179522509399565497388177620476975339549409114794102372856180257419279547815226638547615564729591635194907838368233407372619171449905996159144979027779720175355150906465742952963349285520907411979209309225864685434990064485839589626525923631957709906929750209401972966523934606618201085550986867880928544654620667275192720610247942438714359168981791846760393831953040751093403648875455458263826570570369903732862532283815873937654336795763665151352727356267790713710784341037151073750242265935654301822667362379287258100351944689950419360866351757625295148474180491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a6b4e3f9843629c107c05a8e6247333062b2de26
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (339 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.mafiact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-dbds.dylanhodge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.saautopilot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calllogs.volfsystem.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'decode.compliancemanager.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e21ok7e.cheggindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmina.compliancemanager.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npassets.access-networks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.slafoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.dsncon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wuf.europeanaccounting.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eccosphere.work'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.studentportal.asiaexchange.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c082ca23f00000403004830460221009c5971dd9bca38f5c1a988951e51e400901aa8af372f492df78b5d2c50582b4b022100de67b66dbac61b56bc0d47067277fd26d12b50a88770c6eab9cb0ce5cf072be300770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c082ca2410000040300483046022100e1b0ed23dbaef8a60c81d0dea3a146c294e04f25a86fa1f7d22213f825f767fa022100aefb683f1370dc45c94cd12e2bdecba9c3406dc76f8e288a0f12c71cdfb23030
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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