yf.co.za

Issued by R3

About this certificate

This digital certificate with serial number 04:35:85:59:c1:b6:c7:8d:59:55:3f:88:bf:10:07:c6:db:cb was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=yf.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:35:85:59:c1:b6:c7:8d:59:55:3f:88:bf:10:07:c6:db:cb
Serial Number (int): 366661362540696866040536280693199841188811
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c5:47:da:17:e6:41:0b:bc:fe:5b:7c:d6:80:18:87:2d:45:f3:25:e0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e1:10:ec:36:d5:36:1d:6b:a9:fd:b4:00:c3:4e:1e:9e:e1:e9:a7:7f
Fingerprint (sha256): aa:5a:7d:e9:59:76:ff:9d:1c:f7:f4:fa:96:9d:82:ff:da:dc:bf:4b:35:80:16:1a:13:1a:6e:09:69:a4:04:3d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate yf.co.za

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for yf.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

animationvideosuite.com
astrologyhoody.com
backup365.jjelect.com
balletticket.com
cleaninfobd.com
computercowgirls.com
eclecticconfections.com
fabuloushome.net
grandisland.net
healthlane.in
ihempfarm.com
parcabizde.net
pulpfan.com
stevensvillewaste.com
thebumpfireking.com
votesmartervotemarter.com
woodwindexcerpts.org
wyomingmortgagelender.com
yf.co.za
youngadultmalerehab.com

Other certificates including the domain name yf.co.za

(limited to 100 certificates)
smokeshowing.net.yf.co.za
yf.co.za
yf.co.za
yf.co.za
gethegswitch.com.yf.co.za
arbitragers.ca
yf.co.za
texaswomendirectory.com.yf.co.za
yf.co.za
yf.co.za
yf.co.za
yf.co.za

Certificate

The complete raw certificate details for yf.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGaTCCBVGgAwIBAgISBDWFWcG2x41ZVT+IvxAHxtvLMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAyMTkwMjIwMDBaFw0yNDA1MTkwMjE5NTlaMBMxETAPBgNVBAMT
CHlmLmNvLnphMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6qyyazZ
w4aPEzzw9VOdKBjCcOKOK6RQCf4E4bqtqp4uS96JRIW9IBL4VHITzg4FbognOoT4
Yo/pLavtrza0Ksz/0eN063HaE11RJJFnqbgU+WeidttjRTlEQL1T5zXGRJfUn0QQ
zB8/3RJR18fM4tDcH6I6dAoBSXq1MKqh0PpR4phK0hfFoDykddeNHls2kG0nEZBe
6GC7cmXF/n2rxRJ/X+4iRABzHlbahOA5Pt/JcQr5TdlfJezLG/w0H7Xs/YMqPLYj
CA9diRpwCcoG4NKbaD7BSFg4HLiulWnlWQ3GPWhNnLrqbyXcNsWaTdgodmDa4kHa
dX/t+J4YwQ7oNwIDAQABo4IDljCCA5IwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTF
R9oX5kELvP5bfNaAGIctRfMl4DAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+d
ixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxl
bmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzCCAZwG
A1UdEQSCAZMwggGPghdhbmltYXRpb252aWRlb3N1aXRlLmNvbYISYXN0cm9sb2d5
aG9vZHkuY29tghViYWNrdXAzNjUuamplbGVjdC5jb22CEGJhbGxldHRpY2tldC5j
b22CD2NsZWFuaW5mb2JkLmNvbYIUY29tcHV0ZXJjb3dnaXJscy5jb22CF2VjbGVj
dGljY29uZmVjdGlvbnMuY29tghBmYWJ1bG91c2hvbWUubmV0gg9ncmFuZGlzbGFu
ZC5uZXSCDWhlYWx0aGxhbmUuaW6CDWloZW1wZmFybS5jb22CDnBhcmNhYml6ZGUu
bmV0ggtwdWxwZmFuLmNvbYIVc3RldmVuc3ZpbGxld2FzdGUuY29tghN0aGVidW1w
ZmlyZWtpbmcuY29tghl2b3Rlc21hcnRlcnZvdGVtYXJ0ZXIuY29tghR3b29kd2lu
ZGV4Y2VycHRzLm9yZ4IZd3lvbWluZ21vcnRnYWdlbGVuZGVyLmNvbYIIeWYuY28u
emGCF3lvdW5nYWR1bHRtYWxlcmVoYWIuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIB
MIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYASLDja9qmRzQP5WoC+p0w6xxSActW
3SyB2bu/qznYhHMAAAGNv2CsLgAABAMARzBFAiBeMMM8bN7g1AkUbbx7HlEZjtxU
/rb0+l0PIU9VZB0F9wIhAJDiMPDPM0PhwJh+Auh1ifkb49y23rwegW2fBu9ARcdB
AHcA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGNv2CuLQAABAMA
SDBGAiEAkBnAhu21tGB7AF0Hcvw6H0+mVYfp59nGj4cSSpUWhAYCIQD4HyKNcxxE
6mNkyQJ3kftK1ulR//L6eUMi3067AchzrjANBgkqhkiG9w0BAQsFAAOCAQEAK1Kn
+KMPLp6NX3/MTP3nzo7PRXSsIUKCH06G8+bLdMsgr53ww0AtjmT4gcueh060jqyJ
FXsBu5tw94ucrYtAk6Nf7hs7Ac7rXLgbMj2OEzlt+uyMvJJagnLy9+Sd7NShziK2
cMSS3L2pnf4hrcfUPxrlmFUyKTF/JziAwbM9ysu052E7p7vkpJt5cPoVBe4rqOj5
taIcTatvTk04OuK+quFeUmj1lnG/U6sQhOR6Q6b8sQVXPcJ8zJWRHs8YY/n6Mltl
L7uXdDp/5Vkq+DvO9flhW2Q0aLMhTIhJy6WZqFPutV4ZcvaNOwbx5mXhU3Z6x1ih
lfrbAMIAREduW9Ci9w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6qyyazZw4aPEzzw9VOd
KBjCcOKOK6RQCf4E4bqtqp4uS96JRIW9IBL4VHITzg4FbognOoT4Yo/pLavtrza0
Ksz/0eN063HaE11RJJFnqbgU+WeidttjRTlEQL1T5zXGRJfUn0QQzB8/3RJR18fM
4tDcH6I6dAoBSXq1MKqh0PpR4phK0hfFoDykddeNHls2kG0nEZBe6GC7cmXF/n2r
xRJ/X+4iRABzHlbahOA5Pt/JcQr5TdlfJezLG/w0H7Xs/YMqPLYjCA9diRpwCcoG
4NKbaD7BSFg4HLiulWnlWQ3GPWhNnLrqbyXcNsWaTdgodmDa4kHadX/t+J4YwQ7o
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 366661362540696866040536280693199841188811
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-19 02:20:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-19 02:19:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'yf.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22680831102171463193822372960536015086462915115388140495309736399172100027217082321680377453875332358494902185214122273719525987530862426186264199313332822514047145803905539339765199843068339273449957741628169600785529018560005581589694686676859512706868054289784868131358421887892380469617360943909917118075933440874698593918509369676733664230120528787340882420451916186164816439692406043655238118003982377945430996802851834796021528353774508396491830916001659365453408255265274791153295788236038318396282235038386624771890306816165540391324083032514506028427913896116853407031758733295741038595467940111539241936951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c547da17e6410bbcfe5b7cd68018872d45f325e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (403 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animationvideosuite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astrologyhoody.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backup365.jjelect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balletticket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleaninfobd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'computercowgirls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eclecticconfections.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabuloushome.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandisland.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthlane.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihempfarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parcabizde.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulpfan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stevensvillewaste.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebumpfireking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'votesmartervotemarter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodwindexcerpts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyomingmortgagelender.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yf.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youngadultmalerehab.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dbf60ac2e000004030047304502205e30c33c6cdee0d409146dbc7b1e51198edc54feb6f4fa5d0f214f55641d05f702210090e230f0cf3343e1c0987e02e87589f91be3dcb6debc1e816d9f06ef4045c741007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018dbf60ae2d00000403004830460221009019c086edb5b4607b005d0772fc3a1f4fa65587e9e7d9c68f87124a95168406022100f81f228d731c44ea6364c9027791fb4ad6e951fff2fa794322df4ebb01c873ae
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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