www.fly-kenya.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:64:a1:4d:58:dc:ae:6b:aa:73:a5:4a:61:3c:15:20:d2:9b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.fly-kenya.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:64:a1:4d:58:dc:ae:6b:aa:73:a5:4a:61:3c:15:20:d2:9b
Serial Number (int): 382691787735650532996290321018839042675355
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: df:d7:c1:37:6f:3e:f3:70:fe:c9:01:93:ff:78:d1:8d:da:2d:dd:82
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 31:54:09:92:40:e5:8e:34:73:2f:3a:17:d0:92:58:0c:a5:8c:68:fc
Fingerprint (sha256): c5:f0:1f:29:2d:36:12:be:47:4b:54:db:67:0a:32:c5:7a:66:02:fd:70:fb:fb:ba:83:b0:4f:c8:e2:9d:9b:6f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.fly-kenya.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.fly-kenya.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.fly-kenya.com

Other certificates including the domain name fly-kenya.com

(limited to 100 certificates)
maximale.clan.rip
www.fly-kenya.com
sangesfreude.lima-city.de
store.enjoi-sailing.com
regaver.lima-city.de
www.vhw.lima-city.de
*.fractale.ch
www.la-perla.lima-city.de
www.bastiant.lima-city.de
www.nyztic.lima-city.de
asuna.lima-city.de
www.koubaibu.de.cool
www.fly-kenya.com
www.en.fly-kenya.com
aimxoo0o.lima-city.de
phpmyadmin.funled.com
buisnessplan.lima-city.de
www.kurt-f-svatek.lima-city.de
fotologistin.lima-city.de
www.fly-kenya.com
fluxcm.lima-city.de
www.fly-kenya.com
vetshah.fly-kenya.com
www.wlahnde.lima-city.de
basisa.4lima.de
mveng.lima-city.de
www.fly-kenya.com
www.saten22.lima-city.de
capqt.lima-city.de
gunter-ihle.de
vetshah.fly-kenya.com
www.pfc.kevinroebert.de
www.fly-kenya.com
www.login.lima.zone
www.fly-kenya.com
admin.sitcoin.de.cool
www.familyjs.lima-city.de
www.keepitfreshandsimple.lima-city.de
www.robinoderwas.lima-city.de
unvirtual.lima-city.de
ogryyxapxpihufj.lima-city.org
www.maltehof.lima-city.de
buisnessplan.lima-city.de
enestucc.lima-city.de
fly-kenya.com
www.kleiderzwerg.lima-city.de
www.fly-kenya.com
www.testhomepage42.lima-city.de
www.daly.lima-city.de
www.fly-kenya.com
www.fly-kenya.com
sfk-jena.lima-city.de
vetshah.fly-kenya.com
nseg.lima-city.de
www.fly-kenya.com
shoutoutbyhannah.lima-city.de
gebrauchtteile-bochum.lima-city.de
dirkmann.2ix.ch
fly-kenya.com
lilly-sophie.lima-city.de
www.cohn-glas.lima-city.de
www.fly-kenya.com
www.fly-kenya.com
www.fly-kenya.com
www.fly-kenya.com

Certificate

The complete raw certificate details for www.fly-kenya.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGDDCCBPSgAwIBAgISBGShTVjcrmuqc6VKYTwVINKbMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA3MTAxNjUyNDFaFw0x
ODEwMDgxNjUyNDFaMBwxGjAYBgNVBAMTEXd3dy5mbHkta2VueWEuY29tMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2bJSrmu0ubiNkAy3WfQzaL5RLKW
Uxu/aeF/wthQ+MlPBX7RIlBFWm2/iih2OIEkcMHQh1Vlaw196hpf/ejoPok0S1Nz
CN5CgEfmxmRgcwqs0fOVy8x+jUj4+50ynEW9dXFeaTN4Sn7UbIZLW7I0kb3QFM7y
Slw0hGjaxtsa/deZA27r1rkJsHGCqYdh5k6z1vLH12nls79QDnH911fwmapo3Fd+
C7bfUgWZ6n4rEwW039INBKXgydejLIBDhxuS16fUZSBUgK8uEH5u31QPFPi3I5AS
Mg3bbSfMoB1mbJ5dck2s9C9p/lXxWmNHiCJDm2ETrsCkc8DQyInsih8ecQIDAQAB
o4IDGDCCAxQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTf18E3bz7zcP7JAZP/eNGN
2i3dgjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcB
AQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlw
dC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlw
dC5vcmcvMBwGA1UdEQQVMBOCEXd3dy5mbHkta2VueWEuY29tMIH+BgNVHSAEgfYw
gfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0
cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBD
ZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBh
cnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0
ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3Np
dG9yeS8wggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQApPFGWVMg5ZbqqUPxYB9S3
b79Yeily3KTDDPTlRUf0eAAAAWSFUuvZAAAEAwBGMEQCIH+1iLFpNn8yPmnloU/5
2kRDSsgvq67AdF8gMWQ7xP4BAiBcUKVW8XSz6VpvuuC1ZdVlalUTwEFoCbGnGgMF
yUaDLwB2AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAABZIVS7I4A
AAQDAEcwRQIgHwaQqY5Wb+kgLdUPkDeaXiw3uEY3fKsQksSokbEznUkCIQDzEVrT
AvbT/QBNhxabT27RqXT7ZMSjjot5d5R9cS8GlDANBgkqhkiG9w0BAQsFAAOCAQEA
WNlhuin4E5bqVF9T1AXhxVakn3zI7hpUqt/MtlosZJPNMQH8eD9GSxupABAC33MQ
qyA//E8bcrd/QMt14OEwigguE0aE0S9lDRATaNr2ZxT0oVFZj//Bqgh9Zr1Sp3wi
VjouU0ArDS161wixyIHha1X6idJLVGqlwfBmYU/GKm97tQZLLSJPya9P2ij6xPsF
o2qfsQ+X+h5kPydcEpLI/96RaWfmb0r853t6oZ2VbYcWWkNs1DcV05UJc4OxFMw/
mcrzV8LxoK2yBnzEh+DCOPKutIG4Ny1NZnJGZ5Sg/bWPnJWl/pUkAD88Y6dAM23e
C7EUVK8tulJHZXUnq4cBGg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2bJSrmu0ubiNkAy3WfQ
zaL5RLKWUxu/aeF/wthQ+MlPBX7RIlBFWm2/iih2OIEkcMHQh1Vlaw196hpf/ejo
Pok0S1NzCN5CgEfmxmRgcwqs0fOVy8x+jUj4+50ynEW9dXFeaTN4Sn7UbIZLW7I0
kb3QFM7ySlw0hGjaxtsa/deZA27r1rkJsHGCqYdh5k6z1vLH12nls79QDnH911fw
mapo3Fd+C7bfUgWZ6n4rEwW039INBKXgydejLIBDhxuS16fUZSBUgK8uEH5u31QP
FPi3I5ASMg3bbSfMoB1mbJ5dck2s9C9p/lXxWmNHiCJDm2ETrsCkc8DQyInsih8e
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 382691787735650532996290321018839042675355
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-10 16:52:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-08 16:52:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.fly-kenya.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25677061719984327365033360840126837676869844855859678411495616338007063434524833382229982714859531594335881236065677232131235734715862492428327043205492288823627780909323491565973950297717391639103323337720514406047126371128253496696908153620795894639049516689708352781664600411622083912222131365312447690240398870295822873992353981759241869497319958545593951069934263989174655525941351066567600667812006895048389424680767561333650484750057946494863666703427478140353003679898024904975746136678905817091505756562702421605283639027042781999672300898417305944785880798753304164246597772118136816242481084816415617130097
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dfd7c1376f3ef370fec90193ff78d18dda2ddd82
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fly-kenya.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001648552ebd9000004030046304402207fb588b169367f323e69e5a14ff9da44434ac82fabaec0745f2031643bc4fe0102205c50a556f174b3e95a6fbae0b565d5656a5513c0416809b1a71a0305c946832f0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001648552ec8e000004030047304502201f0690a98e566fe9202dd50f90379a5e2c37b846377cab1092c4a891b1339d49022100f3115ad302f6d3fd004d87169b4f6ed1a974fb64c4a38e8b7977947d712f0694
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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