federatie-popice.ro

Issued by R3

About this certificate

This digital certificate with serial number 04:14:80:9f:18:4c:c4:2d:f7:a6:cd:91:89:93:ca:4e:1b:0a was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=federatie-popice.ro

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:14:80:9f:18:4c:c4:2d:f7:a6:cd:91:89:93:ca:4e:1b:0a
Serial Number (int): 355425758316980617596900253491979931753226
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d6:cb:d4:c9:2f:4c:ee:01:45:e3:9c:18:8b:ef:4a:85:61:1f:42:64
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 52:4c:02:a6:ec:07:4a:f5:0d:74:06:18:90:6b:b7:50:02:af:13:d2
Fingerprint (sha256): dd:fd:99:09:20:2e:64:4b:2c:d1:97:7f:52:8a:21:62:6c:be:89:49:22:3f:2d:2f:91:6a:87:6a:b7:bc:cc:f9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate federatie-popice.ro

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for federatie-popice.ro

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.federatie-popice.ro
*.ipexpert.ro
*.mailadmin.ro
*.promarketingcom.ro
federatie-popice.ro
mailadmin.ro
promarketingcom.ro
www.alfaparf.ipexpert.ro
www.dibimilano.ipexpert.ro
www.federatie-popice.ipexpert.ro
www.kevedtrans.ipexpert.ro
www.leonardoresidence.ipexpert.ro
www.mailadmin.ipexpert.ro
www.popice-bowling.ipexpert.ro
www.promarketingcom.ipexpert.ro
www.stirbei.ipexpert.ro

Other certificates including the domain name federatie-popice.ro

(limited to 100 certificates)
eduprest.eu
federatie-popice.ro
romalarm.ro
efe.ro
soldea.ro
federatie-popice.ro
federatie-popice.ro
chelsea-bucuresti.com
federatie-popice.ro
creativeschool.ro
ipexpert.ro
coraltrade.ro
federatie-popice.ro
www.federatie-popice.ro
tcsco.ro
federatie-popice.ro
constantincaliman.ro
primariaciorogarla.ro
federatie-popice.ro
federatie-popice.ro
federatie-popice.ro
constantincaliman.ro
federatie-popice.ro
federatie-popice.ro
primariaciorogarla.ro

Certificate

The complete raw certificate details for federatie-popice.ro in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGdDCCBVygAwIBAgISBBSAnxhMxC33ps2RiZPKThsKMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA1MTMxODQ2MTVaFw0yNDA4MTExODQ2MTRaMB4xHDAaBgNVBAMT
E2ZlZGVyYXRpZS1wb3BpY2Uucm8wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDD57VR9rUXOGNanZhmdx8/hLsRwKBFa4oAJMC0s/ZRo6gBGw/79JlD2PEX
9e/lFkfwwfP8SfM0xwpq3RWy9pgju3T9lKmZFOaA8HXsxl5et+nDZHNZl3m1ddtI
1SLTCh4rGOO4eY9CXyUya2p9VvcPKLW+ToC5ZUwI+zeNg6luZs32y38eriJXAMdy
jwIU6eo/ZB9cZMD7O6tszztPZdWMrGXrMmsmOQIif0nW+/K4nhQ124qjBTqtlz09
drca0qPC4fZxdH0ygjOwt/vle4z8zpuiKkl69ZOP/8dqXJHuIhbNJRsR/U6ZbyW7
NNXyhK1TKBNtBU6IoAu3+rHrRyzvAgMBAAGjggOWMIIDkjAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw
HQYDVR0OBBYEFNbL1MkvTO4BReOcGIvvSoVhH0JkMB8GA1UdIwQYMBaAFBQusxe3
WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0
cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j
ci5vcmcvMIIBnAYDVR0RBIIBkzCCAY+CFSouZmVkZXJhdGllLXBvcGljZS5yb4IN
Ki5pcGV4cGVydC5yb4IOKi5tYWlsYWRtaW4ucm+CFCoucHJvbWFya2V0aW5nY29t
LnJvghNmZWRlcmF0aWUtcG9waWNlLnJvggxtYWlsYWRtaW4ucm+CEnByb21hcmtl
dGluZ2NvbS5yb4IYd3d3LmFsZmFwYXJmLmlwZXhwZXJ0LnJvghp3d3cuZGliaW1p
bGFuby5pcGV4cGVydC5yb4Igd3d3LmZlZGVyYXRpZS1wb3BpY2UuaXBleHBlcnQu
cm+CGnd3dy5rZXZlZHRyYW5zLmlwZXhwZXJ0LnJvgiF3d3cubGVvbmFyZG9yZXNp
ZGVuY2UuaXBleHBlcnQucm+CGXd3dy5tYWlsYWRtaW4uaXBleHBlcnQucm+CHnd3
dy5wb3BpY2UtYm93bGluZy5pcGV4cGVydC5yb4Ifd3d3LnByb21hcmtldGluZ2Nv
bS5pcGV4cGVydC5yb4IXd3d3LnN0aXJiZWkuaXBleHBlcnQucm8wEwYDVR0gBAww
CjAIBgZngQwBAgEwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwDuzdBk1dsazsVc
t520zROiModGfLzs3sNRSFlGcR+1mwAAAY9zfc0CAAAEAwBIMEYCIQCLEUKRAdXf
t+k6TpZLx6qg3YgqIeR3nlU43uKaW8hK/gIhAKWl2tHI5XLORgmroG+T0JmdArVB
VWXcl7kBi8vWJWLSAHYAGZgQcQnw1lIuMIDSnj9ku4NuKMz5D1KO7t/OSj8WtMoA
AAGPc33NEwAABAMARzBFAiEAoKoUOtx8TVYlA51LbNbuhgr9NiGVgolBmy3OgORz
8e0CIFPcva2v3XDMJMppceed0ulBT1JrwMvjl1UOjB+7ggkLMA0GCSqGSIb3DQEB
CwUAA4IBAQCg5TT97sieYebEMYehQvnmSOtQbwn+tO1eILlael9yXyWDoEsrufLT
K+IZWghymJIEVNeNNDYywjM6/rK7hO5sP6yuxYqCGVLcfi3JCXVBZGl2uYaeZkUF
hPLyifTMoRwZpGbCvIwFwsIQpFAhPX9F4JhZt/cvcgBGkbiDWjddlpKQLMRv+ZQN
QaTL81AwGOBRaVrDmaaTfDUYkk2IZ6SABUNdoEV1HW4sYcJs5NEcvkb65XzHRHXb
B8NlQzcq/p0kOE7t/aXeIpeoiOGsCyXGVXz5pPlbqDGXy72UReKaIfZmRhOUFs9p
unbeAoLytXBzHjXB5KQ66S+bdvDJa8Kk
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+e1Ufa1FzhjWp2YZncf
P4S7EcCgRWuKACTAtLP2UaOoARsP+/SZQ9jxF/Xv5RZH8MHz/EnzNMcKat0VsvaY
I7t0/ZSpmRTmgPB17MZeXrfpw2RzWZd5tXXbSNUi0woeKxjjuHmPQl8lMmtqfVb3
Dyi1vk6AuWVMCPs3jYOpbmbN9st/Hq4iVwDHco8CFOnqP2QfXGTA+zurbM87T2XV
jKxl6zJrJjkCIn9J1vvyuJ4UNduKowU6rZc9PXa3GtKjwuH2cXR9MoIzsLf75XuM
/M6boipJevWTj//HalyR7iIWzSUbEf1OmW8luzTV8oStUygTbQVOiKALt/qx60cs
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 355425758316980617596900253491979931753226
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-13 18:46:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-11 18:46:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'federatie-popice.ro'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24730729080708685355831547294405247035985344847548568727342522670778986223342400628977946381508478059391613026465926507735321423239585140155091811593316551742324096581799757868403328057897520464284262918536415479781596190574803732371790454858290061016815183329949894231068884165309897401297043310215230384718976779153356088753555903421751435297108390771270967936047318854201316205338246699458257501664012797118746370160507993475751224680129424511874743825845214566569376660473162764671838438950606059383669471457168606050195096970809740395519054928395672019557561729134498079556591260900043538607551041639164414471407
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d6cbd4c92f4cee0145e39c188bef4a85611f4264
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (403 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.federatie-popice.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ipexpert.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mailadmin.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.promarketingcom.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'federatie-popice.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailadmin.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'promarketingcom.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfaparf.ipexpert.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dibimilano.ipexpert.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.federatie-popice.ipexpert.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kevedtrans.ipexpert.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leonardoresidence.ipexpert.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mailadmin.ipexpert.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.popice-bowling.ipexpert.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.promarketingcom.ipexpert.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stirbei.ipexpert.ro'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f737dcd0200000403004830460221008b11429101d5dfb7e93a4e964bc7aaa0dd882a21e4779e5538dee29a5bc84afe022100a5a5dad1c8e572ce4609aba06f93d0999d02b5415565dc97b9018bcbd62562d20076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f737dcd130000040300473045022100a0aa143adc7c4d5625039d4b6cd6ee860afd3621958289419b2dce80e473f1ed022053dcbdadafdd70cc24ca6971e79dd2e9414f526bc0cbe397550e8c1fbb82090b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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