act.progressflorida.org

Issued by R3

About this certificate

This digital certificate with serial number 04:b9:1c:4e:99:f8:d5:08:3c:2a:b3:84:29:c8:e0:50:13:29 was issued on by Let's Encrypt.

With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=act.progressflorida.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b9:1c:4e:99:f8:d5:08:3c:2a:b3:84:29:c8:e0:50:13:29
Serial Number (int): 411439008113374729613087554098456381362985
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ac:c2:cc:be:f4:ea:a7:63:ea:30:f1:c9:1c:ee:a2:cb:d7:00:78:0d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 60:fc:5b:ac:51:cf:4e:7d:a8:ae:89:0f:9d:a4:4f:55:3f:d0:b5:a4
Fingerprint (sha256): b3:c1:1d:26:ad:ce:a9:60:2d:0f:a7:b6:86:0e:a2:03:d7:c5:ca:10:c0:97:22:5f:02:29:f8:6a:3d:1e:81:de

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate act.progressflorida.org

29

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for act.progressflorida.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

act.ayannapressley.com
act.betofortexas.com
act.betoorourke.com
act.climatetruth.org
act.dirtroaddems.com
act.dirtroadpac.com
act.dsausa.org
act.fightforreform.org
act.forecastthefacts.org
act.freepress.net
act.gavinnewsom.com
act.hillharper.com
act.johnfetterman.com
act.jontester.com
act.kathyhochul.com
act.markkelly.com
act.ourrevolution.com
act.passmedicareforall.org
act.priceofoil.org
act.progressarizona.org
act.progressflorida.org
act.progressiowa.org
act.progressmichigan.org
act.qasimforcongress.org
act.squadvictoryfund.com
act.welchforcongress.com
act.welchforvermont.com
act2.freepress.net
go.dscc.org

Other certificates including the domain name progressflorida.org

(limited to 100 certificates)
act.one.org
www-default.actionkit.com
action.standupamerica.com
act.progressiowa.org
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
act.medicare4all.org
www-default.actionkit.com
www-default.actionkit.com
act.ilhanomar.com
act.dirtroaddems.com
www-default.actionkit.com
www-default.actionkit.com
progressflorida.org
act.progressnownm.org
www-default.actionkit.com
www-default.actionkit.com
act.colorofchange.org
www-default.actionkit.com
progressflorida.org
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
act.sumofus.org
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
act.elizabethwarren.com
progressflorida.org
www-default.actionkit.com
progressflorida.org
www-default.actionkit.com
progressflorida.org
www-default.actionkit.com
progressflorida.org
progressflorida.org
act.gunsensevoter.org
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
progressflorida.org
www-default.actionkit.com
progressflorida.org
action.standupamerica.com
progressflorida.org
progressflorida.org
www-default.actionkit.com
act.progressga.org
www-default.actionkit.com
act.ruraldemocratsturnoutfund.com
progressflorida.org
action.pollinis.org
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
act.ourrevolution.com
progressflorida.org
act.democratic-strategy.org
www-default.actionkit.com
progressflorida.org
www-default.actionkit.com
act.beaherofund.com
go.giffords.org
www-default.actionkit.com
act.hillharper.com
act.progressflorida.org
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
act.gavinnewsom.com
www-default.actionkit.com
www-default.actionkit.com
progressflorida.org
act.leaderswedeserve.com
www-default.actionkit.com
act.nuestropac.com
action.standupamerica.com
www-default.actionkit.com
www-default.actionkit.com
www-default.actionkit.com
act.ourrevolution.com
www-default.actionkit.com
www-default.actionkit.com
act.bcndp.ca
progressflorida.org
act.occupydemocrats.com
progressflorida.org
act.qasimforcongress.org

Certificate

The complete raw certificate details for act.progressflorida.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0arNudO9ULum49sW8FRy
KNxms0QPtfkiqBhJUd7UorBVEvc7cCqfK2HfWeJptCjVxmm/bVdJXTt83FGg0Mmx
HOWZbdkaeEpgce+yJ9jJHm6blRHxY3M+zXfApDE3kASkfJKO9AnSeTFMS9ZRQsf2
pHz7SikH/XVeDPwMMWY8iCS2DHAC+snrHVq3N3/2jZJVN/JqStqUvf+mcOIebPeo
/zkGDxsVi0N634dDeOHF7WxLVv06I/lhvd4WW22rsnpradIxz5pATBCmhrFNXDIN
glcHX5WLVSMC6UG5PA6CyYrC+ThNTmQ+0KFcOcGhtrnF0AeGlUUpt15zhHtZCs89
O+yRJUGTQIk6EYWDm06hX6RuOzRLjKQmTq4jjrOWUiz5wLQEszkUQwbZXWMFwrFV
UoDTtq92Uv4yoBZJFnaTvp+53Bu0hfjYK5J2MozyhorvHP2psRo3d4l+ZqQU/mB+
6LL1NQ9O6uRMMSNnfXDdfd9z9YyWBy7hOpUvAHk538lVDi+2kZrsGsVykEJvETbb
qY0OPIIXdUeDK6JprmbHorcVykZ+6zWb8SBbWEeE92RdJsHXNiOtsvZybGMxFPyp
+e94qVKkIV5aPvZQGQgj22AX+vUX6DvHxcfVXIgyJGeRYQLb5TDq3+gyadQDFJaY
LzFoQBFivTvf6pbznnUB0/8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 411439008113374729613087554098456381362985
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-07 22:31:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-05 22:31:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'act.progressflorida.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 855367555379709635587505472316072925482064189650074488040581432856055779339180096434706878757649071501389149838995197949267859401088292428272192484789662830435739366802973549602695788620080710804666507305639559951231400680942346872558997001890941426904012354925050434029558202971352139429250321818179077886940322224295759633956041393416146844095104554234249088208793379638055668829925700661596082398838407669705960381110709000262890508470576009833372881249682429721187306851805874181084108204402907580004205074943692552867052147188772855427092578619314436141450648439603269414696259477795199684628549709592404726463582716989153870914461568751874721372075737841156998906150233271593430685411787964044018035824216475596412391421577661530075406810041938909063052082013429420007834455735245517228977310367144962578530108424753705693667665138276919112687360725229354122617036619429944143052949664521041905816542137573333451616399005106402311276809642522212466581729645273517079373950165761895915972678498362968642557717105809521404172781980019720533280047421933564134028698174803151083363974832136975994999949016157432642632945640020261919388644200274396188502174939223628658778829655126868259773903638116226808875014378921927722691318783
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							acc2ccbef4eaa763ea30f1c91ceea2cbd700780d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (649 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.ayannapressley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.betofortexas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.betoorourke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.climatetruth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.dirtroaddems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.dirtroadpac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.dsausa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.fightforreform.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.forecastthefacts.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.freepress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.gavinnewsom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.hillharper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.johnfetterman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.jontester.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.kathyhochul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.markkelly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.ourrevolution.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.passmedicareforall.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.priceofoil.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.progressarizona.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.progressflorida.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.progressiowa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.progressmichigan.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.qasimforcongress.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.squadvictoryfund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.welchforcongress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.welchforvermont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act2.freepress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.dscc.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bac2092530000040300473045022100ae7c5628dd784cfd06f0155453ea47d8e96b91db3371c38b8428ab8050370149022022a08f1bf38d947d8ede9693716c42eece08e2439738133092a608be8e9d12e400770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bac2092820000040300483046022100d8be63d4d66034350860ecaac2f215a50d7f502d77ac4650f8be37c2a933640e022100a14f2209d80be980cb37c157f63176c160c11c2c6ca4929b63e4b01c64b6388c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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