ayuda.tigo.com.py

Issued by R3

About this certificate

This digital certificate with serial number 03:59:e4:a5:c9:2f:05:db:bb:64:75:c2:bd:74:6c:3d:35:20 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ayuda.tigo.com.py

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:59:e4:a5:c9:2f:05:db:bb:64:75:c2:bd:74:6c:3d:35:20
Serial Number (int): 291925913243754749290588287777040815174944
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 95:aa:a3:a0:3e:ea:68:e0:57:0e:5b:1b:88:c7:67:d7:c6:c6:89:1f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6a:5a:db:c4:b8:4e:9d:01:45:04:a5:44:12:52:45:c3:66:b0:ce:ee
Fingerprint (sha256): b8:39:82:27:6a:31:35:b5:c5:86:f0:ec:9d:50:d0:46:ee:36:18:30:8d:95:46:79:6d:ab:fa:36:79:2e:db:77

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ayuda.tigo.com.py

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ayuda.tigo.com.py

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ayuda.tigo.co.cr
ayuda.tigo.com.bo
ayuda.tigo.com.co
ayuda.tigo.com.gt
ayuda.tigo.com.hn
ayuda.tigo.com.ni
ayuda.tigo.com.py
knowledge.tigo.com

Other certificates including the domain name tigo.com.py

(limited to 100 certificates)
activate.tigo.com.py
ayuda.tigo.com.py
app.mitienda.tigo.com.py
ayuda.tigo.com.py
secure.tigo.com.py
www.thismoment.com
ayuda.tigo.com.py
ayuda.tigo.com.py
knowledge.tigo.com
ayuda.tigo.com.py
music.tigo.com.py
ayuda.tigo.com.py
*.tigo.com.py
login.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
miscontactos.tigo.com.py
ayuda.tigo.com.py
www.thismoment.com
ayuda.tigo.com.py
*.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
login.tigo.com.py
*.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
music.tigo.com.py
knowledge.tigo.com
ayuda.tigo.com.py
knowledge.tigo.com
*.tigo.com.py
ayuda.tigo.com.py
login.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
*.tigo.com.py
*.tigo.com.py
ayuda.tigo.com.py
secure.tigo.com.py
*.tigo.com.py
ayuda.tigo.com.py
music.tigo.com.py
*.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
secure.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
*.tigo.com.py
miscontactos.tigo.com.py
soluciones.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
*.tigo.com.py
*.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
*.tigo.com.py
ayuda.tigo.com.py
*.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
*.tigo.com.py
www.thismoment.com
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
login.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
knowledge.tigo.com
knowledge.tigo.com
secure.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
*.tigo.com.py
www.thismoment.com
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
ayuda.tigo.com.py
soluciones.tigo.com.py

ayuda.tigo.com.py

Certificate

The complete raw certificate details for ayuda.tigo.com.py in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgISA1nkpckvBdu7ZHXCvXRsPTUgMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjA3MDMyMzM5MDlaFw0yMjEwMDEyMzM5MDhaMBwxGjAYBgNVBAMT
EWF5dWRhLnRpZ28uY29tLnB5MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC
AgEA2LkONS/SFm7H0yuu531LnEYPC5wJu9VVOxxXqLkF6Htxo2kF+i5Sl0Q/n9iK
zeqw6Rd1IBtrdKS0F57OSZbRgwwLgXM6/606mCmvVnm6jV8sIOMm8ZysaCOR2bGm
6sQaXihkvEY33y7MA7KMvf59nocEzbMbo6PsvrPuSEkZjy8y6CBYT/yfZHtHB7Ta
CDdk7+1uAqYNwjZWiPJVQ8lDUJxmnyy84wFrVCnIiaeroMvPzfuoFUaduP+/BtTl
cYH2mYkF8wzU2xG/dzH8M73oylK19Au4i9pk60qCOfLey542ZvCwzK3ttmr0YDVA
moHlpppmXCeBxkVWQ5wBSgG38l/oYORQqRSm2J0QJrAaQdsHrHDGkdhq8hVbkYD0
tJYuGQc6rwRJ5rJYjfwtOq5fGeSKNX6n9OGdea46VrTGTXSeChpNy8G6wIeWQshV
HWalBh5OOn3qarFiyDkChABdqQH6tDNO/BbUmAN+yrKFFcF6s+cjC3z0rGUkY7FH
FgKd26RfiX63RRJuPfmUq8GaS6MG41tp0A1zFpld9JyfEV2oIKvpZZ0Zf8rRzioE
gXxgELVgqDbtk5slBt6+v+V7/rQefDTblzJQVUAGrAIkDqQVGQ1+a9Y29JCktSZw
SWxEsq76hLsQkAqRxn14UHFbtn9MsPcEe3mZyeFsqq93QecCAwEAAaOCAeEwggHd
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUlaqjoD7qaOBXDlsbiMdn18bGiR8wHwYD
VR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEG
CCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0
dHA6Ly9yMy5pLmxlbmNyLm9yZy8wgaMGA1UdEQSBmzCBmIIQYXl1ZGEudGlnby5j
by5jcoIRYXl1ZGEudGlnby5jb20uYm+CEWF5dWRhLnRpZ28uY29tLmNvghFheXVk
YS50aWdvLmNvbS5ndIIRYXl1ZGEudGlnby5jb20uaG6CEWF5dWRhLnRpZ28uY29t
Lm5pghFheXVkYS50aWdvLmNvbS5weYISa25vd2xlZGdlLnRpZ28uY29tMEwGA1Ud
IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0
dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0G
CSqGSIb3DQEBCwUAA4IBAQCfjEtzzufZ7g5DcGrYGLInygNOHpyfp/FzJKqkascq
dIm9mlfJc4rX/r1C6hn/+uBSXj2nMgdzgmnOdzdS9BYOPbYvH/h/x6Y94wwkwlMp
dQ97l3RW4IcJvpV885b0eWcVlpANcOjGB8JHYQLDt+c3bIQ4JlQjbxREo00l9HgW
bYRUBPta7ixlMoj//ZSEfFFCr7sqpM6JjNUqJ2QJzqwyHb2HPX21HECVLzqc8C2z
wI4NwSoP8bHbg/aFCFuzPaYQWsnlKAtCd9svb9rHX6lYXZMWLoMd3+2nKarwEqlp
FgSUAKOrsmt1mhGLrf6lfP7LipPv1lVxybXG+lAMKImw
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291925913243754749290588287777040815174944
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-03 23:39:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-01 23:39:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ayuda.tigo.com.py'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 884152183415080775523859149090819527118098341324248821354976438531893152310203621483839113034329256331692293489080414230203916430443480203771116065772585325642001501048629131910588768931726151793476415681374496892628962208697024586103965245793257574918933095006187368908572229473156087651036335810085232690857923177623704943955393793527279341759671330754758194698183361380809441055362819871031733560136610580047453876146109580433915880304353085501727671075921416694619204089674779598580177974671191719189377037584684352729789642231222870573412620573306011804896280779033488607942095744447513439538585239341102925902103520674292561863592588138630353589282737945473777717634785811924022719898707210898629649092576980049253967991975375307623947135965904598490532855205260571520188028115100212918371769213048574097575145082075568577824700491497261361614274756268986520360519471118075140786168704596074887732087365133510257898566494579210917608662097315387136984314803822659856223233912963271412329291489841027445871224389041439789777570012822475127579554784877342792147458368591950496746173703880789255565823556799094386031555738686179277801693479697769402708721236469001563606553154806317392822534027337506042349746998426426765701759463
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							95aaa3a03eea68e0570e5b1b88c767d7c6c6891f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (155 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayuda.tigo.co.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayuda.tigo.com.bo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayuda.tigo.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayuda.tigo.com.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayuda.tigo.com.hn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayuda.tigo.com.ni'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ayuda.tigo.com.py'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowledge.tigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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