ssl.circlesoft.net

Issued by R3

About this certificate

This digital certificate with serial number 03:e5:b0:87:49:ae:17:e0:fa:3e:83:33:d6:6c:34:a0:09:6c was issued on by Let's Encrypt.

With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ssl.circlesoft.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:e5:b0:87:49:ae:17:e0:fa:3e:83:33:d6:6c:34:a0:09:6c
Serial Number (int): 339496166401918686948753598557812791708012
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bf:d5:3b:53:2c:32:f1:27:b5:7b:cd:ef:2d:03:9b:84:e6:8b:9f:e1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1d:5e:0e:b9:67:62:5b:d8:d2:a0:35:16:78:8f:9f:cd:b9:13:0e:65
Fingerprint (sha256): 01:57:9b:9c:90:25:57:8e:f0:e9:68:a0:7d:bc:2e:af:e6:01:57:6c:4b:59:32:a9:f8:3a:6a:03:97:e9:95:3c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ssl.circlesoft.net

38

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl.circlesoft.net

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

booksatstones.com.au
dearreader.co.nz
devonportbookshop.com.au
donnybooks.com.au
dunmore.co.nz
elthambookshop.com.au
everestbooks.com.au
hamilton.poppiesbooks.co.nz
hares-hyenas.com.au
hillofcontentbookshop.com
inkbookshop.com.au
ironbirdbookshop.com.au
jasonbooks.co.nz
jeffreysbooks.com.au
johnreedbooks.com.au
kimberleybooks.com.au
longstoryshort.nz
shop.goodbookshop.nz
shop.iwanbookshop.com.au
shop.oscarandfriends.com.au
ssl.circlesoft.net
www.booksatstones.com.au
www.dearreader.co.nz
www.devonportbookshop.com.au
www.donnybooks.com.au
www.dunmore.co.nz
www.elthambookshop.com.au
www.everestbooks.com.au
www.hamilton.poppiesbooks.co.nz
www.hares-hyenas.com.au
www.hillofcontentbookshop.com
www.inkbookshop.com.au
www.ironbirdbookshop.com.au
www.jasonbooks.co.nz
www.jeffreysbooks.com.au
www.johnreedbooks.com.au
www.kimberleybooks.com.au
www.longstoryshort.nz

Other certificates including the domain name circlesoft.net

(limited to 100 certificates)
timeout.circlesoft.net
moransbooks.circlesoft.net
johnreedau.alpha.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
neighbourhoodbooks.circlesoft.net
abacus.beta.circlesoft.net
ssl.circlesoft.net
neighbourhoodbooks.circlesoft.net
booksatstones.circlesoft.net
aesopsattic.com
bookpassion.beta.circlesoft.net
www.teahousebooks.circlesoft.net
torquaybooks.circlesoft.net
ssl.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
ssl.circlesoft.net
childrensbookshop.beta.circlesoft.net
thebookroomatlennox.circlesoft.net
moransbooks.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
booksatstones.circlesoft.net
teahousebooks.beta.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
*.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
booksatstones.circlesoft.net
*.circlesoft.net
torquaybooks.circlesoft.net
moransbooks.circlesoft.net
pageblackmore.beta.circlesoft.net
ballaratonydiard.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
*.circlesoft.net
metropolis.beta.circlesoft.net
bookpassion.beta.circlesoft.net
boobookonowen.beta.circlesoft.net
*.beta.circlesoft.net
bookpassion.beta.circlesoft.net
timeout.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
wholesale.circlesoft.net
neighbourhoodbooks.circlesoft.net
*.alpha.circlesoft.net
ssl.circlesoft.net
moransbooks.circlesoft.net
childrensbookshop.beta.circlesoft.net
abacus.circlesoft.net
abacus.beta.circlesoft.net
ssl.circlesoft.net
moransbooks.circlesoft.net
ballaratbridge.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
circlesoft.net
ssl.circlesoft.net
vivabooks.beta.circlesoft.net
ssl.circlesoft.net
abacus.beta.circlesoft.net
ssl.circlesoft.net
moransbooks.circlesoft.net
childrensbookshop.beta.circlesoft.net
*.beta.circlesoft.net
ironbirdbookshop.circlesoft.net
matildabookshop.beta.circlesoft.net
johnreedau.beta.circlesoft.net
abacus.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
paradoxbooks.beta.circlesoft.net
cookthebooks.beta.circlesoft.net
moransbooks.circlesoft.net
ssl.circlesoft.net
pottspoint.beta.circlesoft.net
cowlickbooks.beta.circlesoft.net
ssl.circlesoft.net
ssl.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net
ssl.circlesoft.net
area52.circlesoft.net
abacus.circlesoft.net
jasonbooks.circlesoft.net
abacus.beta.circlesoft.net
retail.dev.circlesoft.net
booksatstones.circlesoft.net
moransbooks.circlesoft.net
pageblackmore.beta.circlesoft.net
abacus.circlesoft.net
moransbooks.circlesoft.net
moransbooks.circlesoft.net

Certificate

The complete raw certificate details for ssl.circlesoft.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEzoVLMh8RQi8/g+Av0jWFjws2/oA7
N1notkahUUXXKMxxi/uRIDbIwVg/7B5C94QZIWVdCzHLmFt15/gO9jM+4A==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339496166401918686948753598557812791708012
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-04 09:47:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-02 09:47:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl.circlesoft.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004ce854b321f11422f3f83e02fd235858f0b36fe803b3759e8b646a15145d728cc718bfb912036c8c1583fec1e42f7841921655d0b31cb985b75e7f80ef6333ee0
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bfd53b532c32f127b57bcdef2d039b84e68b9fe1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (909 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booksatstones.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dearreader.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devonportbookshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donnybooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunmore.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elthambookshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everestbooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamilton.poppiesbooks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hares-hyenas.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillofcontentbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inkbookshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ironbirdbookshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jasonbooks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeffreysbooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnreedbooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kimberleybooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longstoryshort.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.goodbookshop.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.iwanbookshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.oscarandfriends.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.circlesoft.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booksatstones.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dearreader.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devonportbookshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.donnybooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dunmore.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elthambookshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.everestbooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hamilton.poppiesbooks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hares-hyenas.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hillofcontentbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inkbookshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ironbirdbookshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jasonbooks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jeffreysbooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnreedbooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kimberleybooks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.longstoryshort.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e0912fe460000040300463044022058776cd4e54237f806b38e0e9953fbd3bc7f91662c6f4d1db90adfc6e9c58af102207a4fc03324183bf1ea510e12852e08c5a80d5d996698c9eede118a7df92ea01500760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e0912ffe00000040300473045022100896b9a16d0d0c126030f1de4fdde643b3415198a35cf91ce63b2a43d3d1331c902200369d748ff144bc6193477198dba8e2ddaf3fd9eb125eedd5463205a68e8ae91
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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