sustainabilitydashboard.cambridgema.gov

Issued by R3

About this certificate

This digital certificate with serial number 04:57:fe:e0:39:7b:9d:f9:c7:ed:c1:f3:ce:8b:4e:0d:3c:10 was issued on by Let's Encrypt.

With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sustainabilitydashboard.cambridgema.gov

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:57:fe:e0:39:7b:9d:f9:c7:ed:c1:f3:ce:8b:4e:0d:3c:10
Serial Number (int): 378392497800479615851523093766331884715024
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a2:b2:73:d7:28:5d:74:12:4e:85:50:0f:c9:01:a0:ff:f4:10:de:83
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1e:1e:d2:97:8b:7f:bc:a1:0e:26:54:02:18:ce:9f:a0:58:ec:df:ee
Fingerprint (sha256): de:e4:b5:55:2e:55:ca:c7:b6:a6:29:f9:98:84:77:94:ac:ea:af:ba:49:a3:56:6a:25:82:18:32:4f:97:23:22

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sustainabilitydashboard.cambridgema.gov

29

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sustainabilitydashboard.cambridgema.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

climateactionmilpitas.org
comoclimateaction.org
designresiliency.com
devensforward.com
encinitasenvironment.org
green.worcesterma.gov
livablenashua.org
nbresilient.com
resilient-together.org
resilient.danversma.gov
resilient.wakefield.ma.us
resilient.watertown-ma.gov
sasustainability.com
sunnyvaleclimateaction.org
sustainabilitydashboard.cambridgema.gov
sustainableconcord.org
sustainablededham.org
thevineyardway.org
www.climateactionmilpitas.org
www.designresiliency.com
www.devensforward.com
www.encinitasenvironment.org
www.livablenashua.org
www.resilient-together.org
www.resilient.watertown-ma.gov
www.sasustainability.com
www.sunnyvaleclimateaction.org
www.sustainableconcord.org
www.thevineyardway.org

Other certificates including the domain name cambridgema.gov

(limited to 100 certificates)
sustainabilitydashboard.cambridgema.gov
gisserver.cambridgema.gov
pcs-dispatcher.cambridgema.gov
chance.cambridgema.gov
www.cambridgema.gov
secure5a82116344db483adc000000.nationbuilder.com
www.cambridgema.gov
gis.cambridgema.gov
Exchange.Cambridgema.gov
Permits.CambridgeMA.GOV
results.cambridgema.gov
secure5a82116344db483adc000000.nationbuilder.com
sustainabilitydashboard.cambridgema.gov
secure5a82116344db483adc000000.nationbuilder.com
bullseye.cambridgema.gov
sustainabilitydashboard.cambridgema.gov
data.cambridgema.gov
budget.data.cambridgema.gov
gatehouse.cambridgema.gov
gatehouse.cambridgema.gov
gisserver.cambridgema.gov
Secure.CambridgeMA.Gov
www.cambridgema.gov
www.cambridgema.gov
results.cambridgema.gov
Permits.CambridgeMA.GOV
permits.cambridgema.gov
data.cambridgema.gov
Permits.CambridgeMA.GOV
courage.cambridgema.gov
gis.cambridgema.gov
secure.cambridgema.gov
minibonds.cambridgema.gov
gis.cambridgema.gov
www2.cambridgema.gov
aruba.Cambridgema.gov
Permits.CambridgeMA.GOV
data.cambridgema.gov
Exchange.cambridgema.gov
admin-kla-prod.2ambh.com
firepermits.cambridgema.gov
remedydev.cambridgema.gov
muttley.cambridgema.gov
minibonds.cambridgema.gov
firepermits.cambridgema.gov
firepermitstest.cambridgema.gov
www2.cambridgema.gov
admin-kla-prod.2ambh.com
remedydev.cambridgema.gov
pcs-dispatcher.cambridgema.gov
remedy.cambridgema.gov
chance.cambridgema.gov
secure5a82116344db483adc000000.nationbuilder.com
Secure.CambridgeMA.gov
pb.cambridgema.gov
secure.cambridgema.gov
Exchange.Cambridgema.gov
cground.cambridgema.gov
tera.cambridgema.gov
mdm.ps.cambridgema.gov
www.cambridgema.gov
results.cambridgema.gov
wvd.cambridgema.gov
bitbucket.cambridgema.gov
voicemail.cambridgema.gov
gisserver.cambridgema.gov
budget.data.cambridgema.gov
secure5a82116344db483adc000000.nationbuilder.com
www.cambridgema.gov
remedy.cambridgema.gov
firepermits.cambridgema.gov
data.cambridgema.gov
gis.cambridgema.gov
techtraining.cambridgema.gov
gatehouse.cambridgema.gov
permits.cambridgema.gov
www2.cambridgema.gov
secure5a82116344db483adc000000.nationbuilder.com
secure5a82116344db483adc000000.nationbuilder.com
data.cambridgema.gov
betatest.cambridgema.gov
data.cambridgema.gov
budget.data.cambridgema.gov
gis.cambridgema.gov
Gis.Cambridgema.Gov
data.cambridgema.gov
Exchange.cambridgema.gov
data.cambridgema.gov
sustainabilitydashboard.cambridgema.gov
mdm.ps.cambridgema.gov
secure5a82116344db483adc000000.nationbuilder.com
sustainabilitydashboard.cambridgema.gov
sustainabilitydashboard.cambridgema.gov
sustainabilitydashboard.cambridgema.gov
permits.cambridgema.gov
gisserver.cambridgema.gov
Permits.CambridgeMA.GOV
Secure.CambridgeMA.gov
secure5a82116344db483adc000000.nationbuilder.com
gisserver.cambridgema.gov

Certificate

The complete raw certificate details for sustainabilitydashboard.cambridgema.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Fal4iNg754vGtGWNZ4M
dwE7uo3Mw4pbIFXEUDxqgPY5PzrZXkGjc1Iy3Rw/ToVndRAS6lJFRzy150njkWko
jySC5XkfQoMVux0VSAIST52P+rTD8byWV8f/Rmh6Xvv2cJnyAGlFD/j1xKjoWJVY
6jXQNiPNQvxNsaXADiNeEdkPIL+L9OTQjGcea+vRsGfuO8TXkdL51Kk4K2CBXtBJ
T2TJVosBurxNIC6gBGB693LVHGpeCO8VgLWMs/FJ+ayyAvzKs3IYYiIVM8uLub6R
UQI/D7sX9icJ4RrRA2i/M9hY3k02aiRYTjy0WZJZIJePC5NmHDVcSZ9SSOuNG5FN
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 378392497800479615851523093766331884715024
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-22 16:43:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-22 16:43:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sustainabilitydashboard.cambridgema.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30339920904185515599252946693233834406161412807623547098022298575824576786346571782973447771257753368069541860216292386571454334138752345957982060661179925028618328760555550263283265954400241664210748379942797709112329979378889464693697336135018938474161765264438369143746214423789221385716041921330556539478353271136925106405552669293131135728472528193586592889386307473384891142362728355542794395597371215614600749202278859695250017405242333564632746288899257292572400800689433476104627676436778928139482143836387113549675610499921628603864576255312438130319347791853535075167808739903881617295706319456080078392803
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a2b273d7285d74124e85500fc901a0fff410de83
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (745 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'climateactionmilpitas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comoclimateaction.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'designresiliency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devensforward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encinitasenvironment.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'green.worcesterma.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livablenashua.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbresilient.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resilient-together.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resilient.danversma.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resilient.wakefield.ma.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resilient.watertown-ma.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sasustainability.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunnyvaleclimateaction.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustainabilitydashboard.cambridgema.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustainableconcord.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustainablededham.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thevineyardway.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.climateactionmilpitas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.designresiliency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devensforward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encinitasenvironment.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livablenashua.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resilient-together.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resilient.watertown-ma.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sasustainability.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunnyvaleclimateaction.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sustainableconcord.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thevineyardway.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dd1ea48c40000040300483046022100864f5115f2e3a13d79cecc65313e9b266a06ca58ff0b88b8c2b1ee9464509cf3022100f8ed701b4de4b1ce4c2afd629e29a59a2c92dad16be9a1036289037292d36bfa007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018dd1ea4ad500000403004830460221008da9ce5bcf36005575eca39f760e2f2bbd1355efcff21976e046a3a590496dfd0221009b27da552586dbbbf27e8110cbadfc21902cc33d075e4bec6225b4aaf8bae801
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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