xeroxpalit.gtntechsol.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c1:6c:3e:2d:a5:0c:f6:68:15:68:d6:11:5d:26:44:29:97 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=xeroxpalit.gtntechsol.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c1:6c:3e:2d:a5:0c:f6:68:15:68:d6:11:5d:26:44:29:97
Serial Number (int): 327155234082756954148458894003882409863575
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 39:61:24:f4:57:92:a2:55:3d:b5:94:83:d5:95:7b:a1:27:c9:23:53
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c7:b9:9f:36:96:45:08:0d:93:ab:c0:a6:4f:ba:3e:b4:26:bb:93:b7
Fingerprint (sha256): c7:1e:60:90:4e:70:b9:38:33:06:16:57:87:07:94:11:15:2b:0e:46:b7:93:02:cc:82:f8:e9:3d:8d:82:3f:68

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate xeroxpalit.gtntechsol.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xeroxpalit.gtntechsol.com

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

xeroxpalit.gtntechsol.com

Other certificates including the domain name gtntechsol.com

(limited to 100 certificates)
*.gtntechsol.com
clubride-ws.gtntechsol.com
fltpkprod.gtntechsol.com
mccln.gtntechsol.com
fltpkprod.gtntechsol.com
mccln.gtntechsol.com
mitigationdashboard.gtntechsol.com
dcwprecon.gtntechsol.com
usace-wordpress-stage.gtntechsol.com
files.gtntechsol.com
ftpmccln.gtntechsol.com
damsafetyresources.gtntechsol.com
mccln.gtntechsol.com
mitigationdashboard.gtntechsol.com
ftoutreach.gtntechsol.com
commute-rebuild.gtntechsol.com
fltpkprod.gtntechsol.com
fltpkprod.gtntechsol.com
clubride.gtntechsol.com
aecomrebuild.gtntechsol.com
xeroxpalit.gtntechsol.com
fltpkprod.gtntechsol.com
*.gtntechsol.com
fltpkprod.gtntechsol.com
mitigationdashboard.gtntechsol.com
usace-wordpress-stage.gtntechsol.com
gategourmet.gtntechsol.com
fltpkprod.gtntechsol.com
ftbrdev.gtntechsol.com
urshelpline.gtntechsol.com
mitigationdashboard.gtntechsol.com
aecomrebuild.gtntechsol.com
urshelpline.gtntechsol.com
gategourmet.gtntechsol.com
ramppdashboard.gtntechsol.com
clubride.gtntechsol.com
ftpmccln.gtntechsol.com
urshelpline.gtntechsol.com
aecomrebuild.gtntechsol.com
*.gtntechsol.com
fltpkprod.gtntechsol.com
urshelpline.gtntechsol.com
ftoutreach.gtntechsol.com
fltpkprod.gtntechsol.com
ftoutreach.gtntechsol.com
aecomrebuild.gtntechsol.com
fltpkprod.gtntechsol.com
mccln.gtntechsol.com
*.gtntechsol.com
files.gtntechsol.com
ftpmccln.gtntechsol.com
aecomrebuild.gtntechsol.com
*.gtntechsol.com
aecomrebuild.gtntechsol.com
ramppdashboard.gtntechsol.com
mccln.gtntechsol.com
metrobus-stage.gtntechsol.com
aecomrebuild.gtntechsol.com
aecomrebuild.gtntechsol.com
clubride-site.gtntechsol.com
*.gtntechsol.com
clubride.gtntechsol.com
sunguide-stage.gtntechsol.com
clubride-site.gtntechsol.com
urshelpline.gtntechsol.com
mccln.gtntechsol.com
ramppdashboard.gtntechsol.com
*.gtntechsol.com
sunguide-stage.gtntechsol.com
fltpkprod.gtntechsol.com
gategourmet.gtntechsol.com
mccln.gtntechsol.com
sunguide-stage.gtntechsol.com
metrobus-stage.gtntechsol.com
amsstage.gtntechsol.com
*.gtntechsol.com
ramppdashboard.gtntechsol.com
aecomrebuild.gtntechsol.com
ftpmccln.gtntechsol.com
clubride-site.gtntechsol.com
fltpkprod.gtntechsol.com
ftoutreach.gtntechsol.com
ftpmccln.gtntechsol.com
commute-rebuild.gtntechsol.com
ams.gtntechsol.com
mitigationdashboard.gtntechsol.com
sunguide-stage.gtntechsol.com
ftpmccln.gtntechsol.com
*.gtntechsol.com
mccln.gtntechsol.com
ftoutreach.gtntechsol.com
xeroxpalit.gtntechsol.com
clubride.gtntechsol.com
mccln.gtntechsol.com
fltpkprod.gtntechsol.com
fltpkprod.gtntechsol.com
clubride.gtntechsol.com
ramppdashboard.gtntechsol.com
ftoutreach.gtntechsol.com
ftpmccln.gtntechsol.com

Certificate

The complete raw certificate details for xeroxpalit.gtntechsol.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF6jCCBNKgAwIBAgISA8FsPi2lDPZoFWjWEV0mRCmXMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMDExMTI5MjdaFw0y
MDA1MDExMTI5MjdaMCQxIjAgBgNVBAMTGXhlcm94cGFsaXQuZ3RudGVjaHNvbC5j
b20wggGiMA0GCSqGSIb3DQEBAQUAA4IBjwAwggGKAoIBgQDrJ4e8Rt9fO+NDtp9g
vyYStmGJH7Yh8RrOYRmopVCUIFnxCNxCXzRKmSvVEAtq/XuPwpxe4hjePawhCzOG
CHcugTA4bDURHxMUe49wDvo0jZU8ZsaTEUHBcxwE4Z7+8zESQAOYIQg2W2h7nq5u
KkAOzwUZhrWp1AVnrHtMGS1mohqTWX9kcP0ysjJv1yBPEflYoN7cSV3MFhmjn2PJ
3iQgVB3v3vmzBiGm7PcBTy6a7R9c6he9Vp2KAkFwg8ryCzatAFfF/ob4MUJTOKhP
lmTBjmdns8HaeLnjPJzJwp1tGk4DacCQV4FLbWMSDiZVsnRcGcUY8GEnC3/sw16D
aLFWJlwYvAhFt4vr8yNTjIhHSIi3WTuA8xdjN/HEo4EjEif7nTirMLsoGEsP5GKf
kVBZQWjPeJ2jscBqD/ZK4cH1EXbyT3d4yIkSdGWVs00PK+k4qvN5D0pBui6cf6y2
Ut9gpMLtlFNxQjh3hMVouXdH5z1JNgbr2LjC2mMaO7S/H/sCAwEAAaOCAm4wggJq
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUOWEk9FeSolU9tZSD1ZV7oSfJI1MwHwYD
VR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4G
CCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8G
CCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAk
BgNVHREEHTAbghl4ZXJveHBhbGl0Lmd0bnRlY2hzb2wuY29tMEwGA1UdIARFMEMw
CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j
cHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHcAXqdz
+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFwALo0EAAABAMASDBGAiEA
r6yMR1Hhej1k3fjELVPt2lMvO/zYxEST8Ltm8ldR36QCIQDg++db2TKVL2tL40ao
EJTSbA19fkh8hAOOIAYtblowtQB1ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJ
Uy3vi5BeAAABcAC6NAkAAAQDAEYwRAIgaT61nXkVvOohAAMqdC63CRSFNRZwLwY8
z3lOBw12QRUCIBiVovMDc/X7a7NTsA4+OdluPz0dkMA/6kOKMd6qWXeSMA0GCSqG
SIb3DQEBCwUAA4IBAQA5qc4lvx3QX1lxBTfk6NdH5VwE/DANXBdAb3Iu+BA3Gv/+
jNIDUCW0Ln+dNI1k8CPh5W3dkwoxCfxu+dI3VYiuV6BMlgwNfVKA2rfZwjCwKJJ8
Ju+wzdSOChgvquCmpoLDIK+pM0NFGQaAQ5jadXfQj63FnhnZUK2TeNX2hLfU64x6
RFFDL7SgW/xWrBO2Js9tQrjXeaVjf1QmKYGTNLSCcb0gFit1V9+cFNyJMpMA4jua
NBc5tFyCuQVbn7dHNg3jMfz8XA1T17tknPAuhqXEn9b2YkzLj7B2+nmEOt3odW8e
3hGuraHnMRWqGqVapvfvGHV7KFioc7/PMRvAf2As
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327155234082756954148458894003882409863575
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-01 11:29:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-01 11:29:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xeroxpalit.gtntechsol.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 5336541010512837088111535609945949575451328975695397856624545159470320921095576679930528328202980998036940372370784037784843068089215365554619151954770529327664548004032590289100870146942146699179753340702575116804742721589857099329573923428181997322825217939009015007950317926541782732507810345760072222391694152743111750172003717887126510510101803499230833457941158795016622878729815768844610631909504175306726150393509158888917983009268835223656547288334396326612702726422134168289475942918154305129920962639625423441512385125584260462511570890302081839031435678202974081915701527028376831059911178053546913521300765673145094895166435133770569354055593949378130628830224438287768858359103133209251441688672728709686724671032104532123718428525229336662551799867965259020768987430976391948954293798115447200366588457092819382108228054682623359975514118200565857733023687999625161932405495986230024172711575064995851772305403
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							396124f45792a2553db59483d5957ba127c92353
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xeroxpalit.gtntechsol.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017000ba34100000040300483046022100afac8c4751e17a3d64ddf8c42d53edda532f3bfcd8c44493f0bb66f25751dfa4022100e0fbe75bd932952f6b4be346a81094d26c0d7d7e487c84038e20062d6e5a30b5007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017000ba340900000403004630440220693eb59d7915bcea2100032a742eb70914853516702f063ccf794e070d76411502201895a2f30373f5fb6bb353b00e3e39d96e3f3d1d90c03fea438a31deaa597792
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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