www.kosmos.altjira-ts.com

Issued by R3

About this certificate

This digital certificate with serial number 04:14:e1:f8:cf:af:28:6b:28:70:ce:c6:b0:13:f4:ab:d7:1b was issued on by Let's Encrypt.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.kosmos.altjira-ts.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:14:e1:f8:cf:af:28:6b:28:70:ce:c6:b0:13:f4:ab:d7:1b
Serial Number (int): 355555159266468503906741506155498865153819
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 25:cf:f0:cf:e2:7f:58:af:85:c9:16:67:c9:e5:f5:10:21:57:5d:22
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9f:58:ca:be:db:0f:1d:16:3c:9f:6c:21:11:2b:54:b1:5d:82:80:8f
Fingerprint (sha256): f2:8c:ef:5c:fb:84:5b:d2:90:f4:b8:77:f2:5a:82:87:3e:9c:51:98:08:a6:f5:b6:50:ef:d6:79:f1:b4:0c:14

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.kosmos.altjira-ts.com

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.kosmos.altjira-ts.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.altjira-ts.com
*.bettersecuritythroughpiglatin.com
*.kimwhiteband.com
*.kkinsey.com
altjira-ts.com
bettersecuritythroughpiglatin.com
kimwhiteband.com
kkinsey.com
www.bettersecuritythroughpiglatin.altjira-ts.com
www.excesstoneeds.altjira-ts.com
www.k01.altjira-ts.com
www.k02.altjira-ts.com
www.kimwhiteband.altjira-ts.com
www.kkinsey.altjira-ts.com
www.kosmos.altjira-ts.com
www.pipmsg.altjira-ts.com
www.wiki.altjira-ts.com

Other certificates including the domain name altjira-ts.com

(limited to 100 certificates)
*.altjira-ts.com
kimwhiteband.altjira-ts.com
*.kkinsey.com
kkinsey.com
kkinsey.com
www.k01.altjira-ts.com
bettersecuritythroughpiglatin.com
www.kimwhiteband.altjira-ts.com
www.wiki.altjira-ts.com
kkinsey.com
kkinsey.com
kkinsey.com
www.inm.uyo.temporary.site
kkinsey.com
kkinsey.com
kkinsey.com
www.website-6eb7db29.altjira-ts.com
altjira-ts.com
altjira-ts.com
altjira-ts.com
altjira-ts.com
altjira-ts.com
www.kosmos.altjira-ts.com
*.kkinsey.com
altjira-ts.com
www.website-6eb7db29.altjira-ts.com
pipmsg.xyz
kkinsey.com
kkinsey.com
pipmsg.xyz
www.k01.altjira-ts.com
pipmsg.xyz
www.kosmos.altjira-ts.com
www.kimwhiteband.altjira-ts.com
kimwhiteband.com

Certificate

The complete raw certificate details for www.kosmos.altjira-ts.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGqDCCBZCgAwIBAgISBBTh+M+vKGsocM7GsBP0q9cbMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMTgxMTEzMDRaFw0yNDAyMTYxMTEzMDNaMCQxIjAgBgNVBAMT
GXd3dy5rb3Ntb3MuYWx0amlyYS10cy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDmyrrtru2yCUwZ19AbDi/WDQ6wT3TP7zRcijVCGjZksksiJWWQ
SUnLFJnQm0mlGNLtKuANw9pPn/AphPJ+sGVv9v4C/1cLZX/488yQi/JClmNgD/vQ
M0+mmiOexqslGEQY5V+OmkzL3nfcxD4oSofaWTGtRBnru1TjV+NjGbs0Ch8ZCYLN
I/cgBTZ0XNXrBVQYhVOi2dovFCLtbcJHxMAtSnG027VEBfpKbA7AmacbQaqCBugL
dvNKInxwDJKgNyJnE1pSLKzZZv2w7Do0FyTB2AP4cNzb3+6b2X8vxYDEo57GvIKV
0Iirj/0c2LE7iT2bPwAqvr0P1lohG0kifb5TAgMBAAGjggPEMIIDwDAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB
/wQCMAAwHQYDVR0OBBYEFCXP8M/if1ivhckWZ8nl9RAhV10iMB8GA1UdIwQYMBaA
FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw
AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu
aS5sZW5jci5vcmcvMIIByQYDVR0RBIIBwDCCAbyCECouYWx0amlyYS10cy5jb22C
IyouYmV0dGVyc2VjdXJpdHl0aHJvdWdocGlnbGF0aW4uY29tghIqLmtpbXdoaXRl
YmFuZC5jb22CDSoua2tpbnNleS5jb22CDmFsdGppcmEtdHMuY29tgiFiZXR0ZXJz
ZWN1cml0eXRocm91Z2hwaWdsYXRpbi5jb22CEGtpbXdoaXRlYmFuZC5jb22CC2tr
aW5zZXkuY29tgjB3d3cuYmV0dGVyc2VjdXJpdHl0aHJvdWdocGlnbGF0aW4uYWx0
amlyYS10cy5jb22CIHd3dy5leGNlc3N0b25lZWRzLmFsdGppcmEtdHMuY29tghZ3
d3cuazAxLmFsdGppcmEtdHMuY29tghZ3d3cuazAyLmFsdGppcmEtdHMuY29tgh93
d3cua2ltd2hpdGViYW5kLmFsdGppcmEtdHMuY29tghp3d3cua2tpbnNleS5hbHRq
aXJhLXRzLmNvbYIZd3d3Lmtvc21vcy5hbHRqaXJhLXRzLmNvbYIZd3d3LnBpcG1z
Zy5hbHRqaXJhLXRzLmNvbYIXd3d3Lndpa2kuYWx0amlyYS10cy5jb20wEwYDVR0g
BAwwCjAIBgZngQwBAgEwggEGBgorBgEEAdZ5AgQCBIH3BIH0APIAdwBIsONr2qZH
NA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYviWUoJAAAEAwBIMEYCIQDTC0PX
+bkK9v4DSQRkBWC8e4nGrLzmzUuxNJgWKzQNAQIhAM3xs0C0NuJ4POnLYCXpf/ab
VCtJ5zfiISMvngoA3kz9AHcAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xa
OnQAAAGL4llKRgAABAMASDBGAiEAzvqx3J0piuK+eRlgUOXGE9Oiresq79AzgMlS
fRgW3AsCIQDCou7w3pPpMEtLmFJKmAcFP+Jdy/onnKL/KUIKMdunvDANBgkqhkiG
9w0BAQsFAAOCAQEAuUQOkp8L8YT5puqlxTHS3JztcnrBY8tE1gBm8Wa83wNqQU2b
39uI1fV4nSPrnN1EmvdGowqiDMgD7chm5H89O+SpecVuxygSh5FEsFQ7VBtBFiBc
MaOkwAReMDfhyXlvFCwmt9EV3yE/fHjqN8CDFEiBaem4BLmDqVHH4b62xAqaDtEE
/ZUFB9OPjuASdWJgFXkapdnT61Pjp0fYja+if8hoqviRCtavDGyVpnbgFiQBq219
eGWQbN/YEGEzrwHU7nxnVd0JhOfOU/csl/5Sy557f1Mb3IR0UAkchTQiNMlJusSI
yGxjhtFmCYdhx/wW8yw7kxs7YXJs25OkJCc53w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sq67a7tsglMGdfQGw4v
1g0OsE90z+80XIo1Qho2ZLJLIiVlkElJyxSZ0JtJpRjS7SrgDcPaT5/wKYTyfrBl
b/b+Av9XC2V/+PPMkIvyQpZjYA/70DNPppojnsarJRhEGOVfjppMy9533MQ+KEqH
2lkxrUQZ67tU41fjYxm7NAofGQmCzSP3IAU2dFzV6wVUGIVTotnaLxQi7W3CR8TA
LUpxtNu1RAX6SmwOwJmnG0GqggboC3bzSiJ8cAySoDciZxNaUiys2Wb9sOw6NBck
wdgD+HDc29/um9l/L8WAxKOexryCldCIq4/9HNixO4k9mz8AKr69D9ZaIRtJIn2+
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 355555159266468503906741506155498865153819
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-18 11:13:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-16 11:13:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.kosmos.altjira-ts.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29134780124449635327386200940252947396071899380184290694629851869962259707004646970412229355081119567505027583407910807175192710286305560753092418800484565043493353015174353704904084996006552646873452148697108563022228099585244244291524325907644261526443861431515429090355444730641189490831213061976207639171886463690434904945992598063703263909135462712445193941532989143460426062953143717438596503750293561372514433186572331434983772233711656091904871077359634377855808642784931234906821858558149247811182904553857999103748207197696063588949221505046700498615158371244045698405131543299530115869593279072678218415699
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							25cff0cfe27f58af85c91667c9e5f51021575d22
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (448 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.altjira-ts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bettersecuritythroughpiglatin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kimwhiteband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kkinsey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'altjira-ts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bettersecuritythroughpiglatin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kimwhiteband.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kkinsey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bettersecuritythroughpiglatin.altjira-ts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.excesstoneeds.altjira-ts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.k01.altjira-ts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.k02.altjira-ts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kimwhiteband.altjira-ts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kkinsey.altjira-ts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kosmos.altjira-ts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pipmsg.altjira-ts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wiki.altjira-ts.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018be2594a090000040300483046022100d30b43d7f9b90af6fe034904640560bc7b89c6acbce6cd4bb13498162b340d01022100cdf1b340b436e2783ce9cb6025e97ff69b542b49e737e221232f9e0a00de4cfd00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018be2594a460000040300483046022100cefab1dc9d298ae2be79196050e5c613d3a2adeb2aefd03380c9527d1816dc0b022100c2a2eef0de93e9304b4b98524a9807053fe25dcbfa279ca2ff29420a31dba7bc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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