*.kwitkon.xaa.pl

Issued by R11

About this certificate

This digital certificate with serial number 04:94:dd:73:d8:a2:ec:08:64:aa:c2:86:79:35:00:03:76:43 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.kwitkon.xaa.pl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:94:dd:73:d8:a2:ec:08:64:aa:c2:86:79:35:00:03:76:43
Serial Number (int): 399105294926455562417346702697098926847555
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 47:63:44:b9:d5:3d:20:3e:e3:1c:62:f2:5f:87:f9:5a:42:2b:43:4b
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): ff:bd:67:d7:59:ef:69:e9:22:83:76:49:7f:3a:3e:f8:dc:71:29:fd
Fingerprint (sha256): cf:59:0c:f4:a3:c8:35:eb:d0:2e:06:02:c7:bd:62:ac:6c:b1:c7:48:de:02:23:b8:35:32:fe:e4:46:a5:b0:6e

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate *.kwitkon.xaa.pl

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.kwitkon.xaa.pl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.kwitkon.pl
*.kwitkon.xaa.pl
kwitkon.pl
kwitkon.xaa.pl
www.kwitkon.kwitkon.xaa.pl

Other certificates including the domain name xaa.pl

(limited to 100 certificates)
spawanie-energomat.pl
senzen.xaa.pl
*.rakiety.org.pl
artemidarex.xaa.pl
*.bubu.xaa.pl
karkonoszeplay.pl
*.pearlsofrock.xaa.pl
tomasz-witek.xaa.pl
mebleopoczno.pl
bestquad.xaa.pl
nataliajaworska.xaa.pl
rybowicz.pl
urbacz.xaa.pl
domena.xaa.pl
nmpww.pl
arturmadalinski.xaa.pl
izabelkanieckarzsuccess.xaa.pl
niebezpieczne-zjawiska.xaa.pl
3dsgn.pl
cs-max.xaa.pl
pelnydziob.pl
az-serwis.com
umic.xaa.pl
avle.xaa.pl
izabellswiderska.xaa.pl
24.xaa.pl
sufitdesign.xaa.pl
polishtalentshow.xaa.pl
mateuszwloch.xaa.pl
lksgoluchow.xaa.pl
ggbud.eu
blrp.xaa.pl
*.mdkchodziez.pl
sklepsms-dd2.xaa.pl
*.ociepleniabudynku.xaa.pl
kamilslodowski.xaa.pl
sc-ligaserwer.xaa.pl
sc-ligaonline.pl
drinkionline.pl
lukasznowak-mg.xaa.pl
malgorzatawojcik.xaa.pl
dorotaglowacka.xaa.pl
zabezpieczobiekt.pl
gasztold.com
archinova.xaa.pl
centrum-po-moc.pl
investgeokrajenka.xaa.pl
*.rsah.pl
skimboard.org.pl
*.tubetycoongame.com
successfulwaypl.xaa.pl
skowronizabela.xaa.pl
zarabianieonline.xaa.pl
imbir-kuchnia.pl
mateusznowok.xaa.pl
www.heckersupplies.dystrybucjauk.xaa.pl
bagart.pl
owczarkirybnik.com.pl
alebabeczka.com.pl
emilemilioner.xaa.pl
majorkalegnica.xaa.pl
freedom-serwer.xaa.pl
*.nikolamezynska.pl
agatasurel.xaa.pl
wjatek.wjatek.xaa.pl
hubertkopczyk.xaa.pl
kwitkon.pl
matiszo92.pl
weedfrags.xaa.pl
agnieszkafilus.xaa.pl
przelom.xaa.pl
evogame.xaa.pl
rod-gwarek.xaa.pl
*.suodkiestudio.xaa.pl
jagodakuzminska.xaa.pl
annamielke.xaa.pl
just-frags.xaa.pl
ktrecruitment.com
fifa-rafa.xaa.pl
felixogrodzenia.xaa.pl
wpdude.xaa.pl
letsfish2.fansite.xaa.pl
flyfield.xaa.pl
verde-dzwirzyno.pl
paulinalaga.xaa.pl
doktormasa.xaa.pl
doktormasa.xaa.pl
cs-saw.pl
neurochirurg.xaa.pl
dcsv.xaa.pl
flyfield.pl
parafiazelislawki.pl
filmstrefa.xaa.pl
danmar.xaa.pl
rozaperek.xaa.pl
takeportfolpss.xaa.pl
dawidsikora.xaa.pl
peszek.xaa.pl
grzegorzwidulinski.xaa.pl
hubertkopczyk.xaa.pl

Certificate

The complete raw certificate details for *.kwitkon.xaa.pl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISBJTdc9ii7AhkqsKGeTUAA3ZDMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTEwHhcNMjQwNjA3MjMxNzMwWhcNMjQwOTA1MjMxNzI5WjAbMRkwFwYDVQQD
DBAqLmt3aXRrb24ueGFhLnBsMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt0ntEci6MMMeEOLV/Q6TCA2PYnBMXXgqWOt6KY57CFEw/erhHDiERpAMt3TH
1k7LnPb2lgimqX0ZEJcjWwhLXw7vqXfzE4G2oj+JY595cfp7E+S+24Izkn6+FtjT
oLQtDpUyelOdSnF2b3XK+3mWsoAGHuuGy72PIRHCZptTNWJEQNUXjngE3c7LbnzT
+Ugu3E8/aFf7WJkp2gHDlNV/HLxVLMO8sSGJzaiLqGoUhpV+hgUgT1HFxg+7/Tb6
cYnHncEazAn96WIsRhEkluoUwYrAh8FjU94qcNMOcYC/K0LLJfhA2AXqtSfn/z9s
V3l/+XcC2TG+XfdSG9NYs37t6QIDAQABo4ICWjCCAlYwDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G
A1UdDgQWBBRHY0S51T0gPuMcYvJfh/laQitDSzAfBgNVHSMEGDAWgBTFz0ak6vTD
wHpslcQtsF6SLybjuTBXBggrBgEFBQcBAQRLMEkwIgYIKwYBBQUHMAGGFmh0dHA6
Ly9yMTEuby5sZW5jci5vcmcwIwYIKwYBBQUHMAKGF2h0dHA6Ly9yMTEuaS5sZW5j
ci5vcmcvMGEGA1UdEQRaMFiCDCoua3dpdGtvbi5wbIIQKi5rd2l0a29uLnhhYS5w
bIIKa3dpdGtvbi5wbIIOa3dpdGtvbi54YWEucGyCGnd3dy5rd2l0a29uLmt3aXRr
b24ueGFhLnBsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB
9QSB8gDwAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGP9TUh
GQAABAMARzBFAiBuA/EdOIp4BoE4emxNndV0Amk4rdR8PeFxrf0yMsXKHwIhALFK
CMiEWGPQ2ijiEtv9Cpqjd0VkCQVUeUrUnu7EF4AqAHYAGZgQcQnw1lIuMIDSnj9k
u4NuKMz5D1KO7t/OSj8WtMoAAAGP9TUhZQAABAMARzBFAiEA7x4l8DJUv9tMiHBt
6XSyMiU8JvQkB7CP7KxMR2tZlQMCICXNvXQ1LVSMyt9De5CeoiTYn9krATlw7/1M
f/6Lpp9QMA0GCSqGSIb3DQEBCwUAA4IBAQCf6BJmhKe6QKBch29kE6HoRFwYZLoP
qxjKDkjVyCP3TDk9BWH5jxq1GBdJwUn6SdVzenWlojuuyEgGyeMlJ8j8t3uTpmkj
Jez8t96xOyJPpZihv1/PBJd+U0V1GNw8gSsgX42aDeYt+iV9AdSGpTqwK3jj4Spc
zTg1Z++CZvdNccDdipF0+CSf8UN+UjT7I/N1dbk6oFkffpsuvaevz7i2pXUNvcFv
Rqle9b1L5XM5fajs2QCvLCQGtfSjiCszVg3G5WP0DrO3mQBsymxJK6HJNNZOi5jQ
6aKgYuwFnK+hitJjqWp5zigvnp7FBfnaj30dHMjseHfqQJ7ACoc85S06
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0ntEci6MMMeEOLV/Q6T
CA2PYnBMXXgqWOt6KY57CFEw/erhHDiERpAMt3TH1k7LnPb2lgimqX0ZEJcjWwhL
Xw7vqXfzE4G2oj+JY595cfp7E+S+24Izkn6+FtjToLQtDpUyelOdSnF2b3XK+3mW
soAGHuuGy72PIRHCZptTNWJEQNUXjngE3c7LbnzT+Ugu3E8/aFf7WJkp2gHDlNV/
HLxVLMO8sSGJzaiLqGoUhpV+hgUgT1HFxg+7/Tb6cYnHncEazAn96WIsRhEkluoU
wYrAh8FjU94qcNMOcYC/K0LLJfhA2AXqtSfn/z9sV3l/+XcC2TG+XfdSG9NYs37t
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 399105294926455562417346702697098926847555
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-07 23:17:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-05 23:17:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.kwitkon.xaa.pl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23138064104002729364913559068796567535160328307747288432268945467465591898522529669604738396733844294927714382153677410296755011160627602249800845233269569443615165424232983262418020672647700477689404076347008498902552955766875525980887529233537668106053854806284020834873977227366121750352770290547415757122677895350340829301071625968530095996039360903698038360096507670708563778158222015207553591109180504023433729811805943422226060080522055358347741716103027108483597086756654114702122479610133540279226758769114064953344720633803602941566650658001986149683673732292454453580141095747295512165565315297945881341417
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							476344b9d53d203ee31c62f25f87f95a422b434b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kwitkon.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kwitkon.xaa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kwitkon.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kwitkon.xaa.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kwitkon.kwitkon.xaa.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ff5352119000004030047304502206e03f11d388a780681387a6c4d9dd574026938add47c3de171adfd3232c5ca1f022100b14a08c8845863d0da28e212dbfd0a9aa3774564090554794ad49eeec417802a0076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ff53521650000040300473045022100ef1e25f03254bfdb4c88706de974b232253c26f42407b08fecac4c476b599503022025cdbd74352d548ccadf437b909ea224d89fd92b013970effd4c7ffe8ba69f50
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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