bogue.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:23:4c:ac:76:0a:35:17:8f:31:9c:d4:db:54:3b:f9:f9:71 was issued on by Let's Encrypt.

With 39 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bogue.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:23:4c:ac:76:0a:35:17:8f:31:9c:d4:db:54:3b:f9:f9:71
Serial Number (int): 273348657434385953800850340584975171713393
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 74:07:27:21:58:be:c1:14:ca:7a:ac:e4:15:05:a3:9f:e4:fa:33:43
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7d:72:32:cb:1e:45:c3:68:63:51:eb:0e:44:29:1e:fc:df:38:3f:0f
Fingerprint (sha256): be:a4:cf:95:1b:8e:d1:9a:bf:ad:d4:bc:e6:f6:67:92:54:fc:21:a0:c1:47:e5:30:c4:8f:69:d1:f2:40:8d:42

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bogue.ca

39

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bogue.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1999.cryptogramophone.com
2001.cryptogramophone.com
api.bogue.ca
bogue.ca
cms.bogue.ca
crypto.tv
cryptogramophone.com
davidwitham.com
dev.cryptogramophone.com
dirtybaby.tv
extranet.crypto.tv
extranet.cryptogramophone.com
flash.davidwitham.com
flash.obstacle.com
indiejazz.com
jeffgauthier.com
jgoat.com
maggieparkins.com
me.jeffgauthier.com
neonhunter.com
nin.oboshii.com
oboshii.com
obstacle.com
oceansofvows.com
portableuniverse.tv
w.bogue.ca
w.jeffgauthier.com
w.oboshii.com
witham.bogue.ca
www.bogue.ca
www.crypto.tv
www.cryptogramophone.com
www.davidwitham.com
www.indiejazz.com
www.jeffgauthier.com
www.jgoat.com
www.oboshii.com
www.obstacle.com
x.oboshii.com

Other certificates including the domain name bogue.ca

(limited to 100 certificates)
1999.cryptogramophone.com
dev.bosh.ca
bogue.ca
mail.orthopedagogues.ca
*.d.bogue.ca
*.d.bogue.ca
bogue.ca
bogue.ca
bogue.ca
dev.bosh.ca
bogue.ca
bogue.ca
mail.ladoq.ca
dev.bosh.ca
bogue.ca
bogue.ca
www.oboshii.com
iadi.c.bogue.ca
*.d.bogue.ca
*.d.bogue.ca
bogue.ca
bogue.ca
www.adoq.ca
d.bogue.ca
bogue.ca
adoq.bogue.ca
d.bogue.ca
o.oboshii.com
bogue.ca
bogue.ca
d.bogue.ca
angel.d.bogue.ca
angel.d.bogue.ca
iadi.c.bogue.ca
oboshii.com
oboshii.com
bogue.ca
bogue.ca
bogue.ca
iadi.c.bogue.ca
extranet.cryptogramophone.com
*.d.bogue.ca
d.bogue.ca
bogue.ca
bogue.ca
bogue.ca
bogue.ca
bogue.ca
bogue.ca
*.d.bogue.ca
iadi.c.bogue.ca
bogue.ca
bogue.ca
adoq.bogue.ca
d.bogue.ca
*.d.bogue.ca
iadi.c.bogue.ca
bogue.ca
bogue.ca
bogue.ca
bogue.ca
d.bogue.ca
bogue.ca
1999.cryptogramophone.com
bogue.ca
dev.bosh.ca
bogue.ca
d.bogue.ca

Certificate

The complete raw certificate details for bogue.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcneKeLWQEK/gtj7BEsB
Q5QzKgms4au2D5oHIoRZ9qSOJwRGD7yo3try333Fse8YaAfBU+bXNbq7pYRh2N7A
mz27RTXhpb7ZZPxs8Amx52pGpCET8zAEJhHGF7UMkzgdhYVRujs1hZOe9jXMB9os
c7awh4IBM/tFcrHXZ2LF1Z2FtwAl4b/3CxOQjVeUnimJbQdOoQXFWLtcnJvkQmt2
shYvA8MG1O+qcTzz/lmgfQ2ahSlJHOV32ydWBk6z6lOaOJRV91txIFtUBa3sAwqY
06pNYzwV6BwbPaYQCXWs/yzOyCj8V3QxRVo4Xf/iVCK99mqhzrsU/TogJpxRZNtO
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273348657434385953800850340584975171713393
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-18 07:00:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-16 07:00:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bogue.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24463537593844099926042166361028581205711100124639382934942167856403537212402278026640604517414914236737518798886868887295650209771725724248934925031188874654286415294071291012133237986977071200051429752350575695335322078619206488520516286638025703698445814899404162522436937294343486333561882302157831626431066855080471462896751979777322802382732217824848797560236316652334074073579246924810728279763241345705643222006204984518606478488922892868378075411251083033305980162980756815261395763152498514839624561583277693987917423081258401877625396423710436653077309904235395768108378338299619061524004783020701870935653
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7407272158bec114ca7aace41505a39fe4fa3343
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (709 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1999.cryptogramophone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2001.cryptogramophone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.bogue.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bogue.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.bogue.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crypto.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptogramophone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davidwitham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cryptogramophone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dirtybaby.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extranet.crypto.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extranet.cryptogramophone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flash.davidwitham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flash.obstacle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indiejazz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeffgauthier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jgoat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maggieparkins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me.jeffgauthier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neonhunter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nin.oboshii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oboshii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obstacle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceansofvows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portableuniverse.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w.bogue.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w.jeffgauthier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w.oboshii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'witham.bogue.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bogue.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crypto.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cryptogramophone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.davidwitham.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiejazz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jeffgauthier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jgoat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oboshii.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.obstacle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'x.oboshii.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001654c0cbc7f0000040300473045022100d86e8ed5f31c2ca62dcf871ad00972db00830a55805c2135067f1c8d409e2bde02203d002103baf49a1c29fa42812e4d41bfe8ccbe71364089300678e61445316fc40075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001654c0cbdb70000040300463044022036de04f92e4c1e48749cad1aa8b39ce0e0c7a616f7466cdd09b7da9ed61935d402206c345bb21e698b19f21422482484e9cc4f8c1f70d59941ab29fb59f6cde929a7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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