techfestival1.ida.dk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:e5:75:50:58:9a:88:be:94:ec:7a:35:34:31:f8:88:3b:6e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=techfestival1.ida.dk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e5:75:50:58:9a:88:be:94:ec:7a:35:34:31:f8:88:3b:6e
Serial Number (int): 426529742608286915172006023051556919196526
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d6:98:ba:54:3e:33:d8:29:e1:3c:52:3d:a7:b6:b3:cd:86:73:df:5f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 89:79:c3:56:46:5c:b1:4a:c2:c1:1c:ee:b6:e6:fd:b1:61:ac:09:97
Fingerprint (sha256): 01:e8:a9:cd:38:dd:a2:df:39:8f:91:45:63:e8:23:a3:57:32:a6:8d:88:03:92:9c:66:1c:e6:2b:b5:8c:ee:0f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate techfestival1.ida.dk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for techfestival1.ida.dk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

techfestival1.ida.dk

Other certificates including the domain name ida.dk

(limited to 100 certificates)
dns-vetting1d.map.fastly.net
twentythree.net
twentythree.net
5648161435549696-fe2.pantheonsite.io
5691420614590464-fe3.pantheonsite.io
phd-day.ida.dk
twentythree.net
twentythree.net
dns-vetting1d.map.fastly.net
twentythree.net
dns-vetting1d.map.fastly.net
techfestival1.ida.dk
dns-vetting1d.map.fastly.net
5691420614590464-fe3.pantheonsite.io
5645240186699776-fe4.pantheonsite.io
twentythree.net
5731563417370624-fe3.pantheonsite.io
dns-vetting1d.map.fastly.net
twentythree.net
dev.wellness.yale.edu
twentythree.net
itstuderende.ida.dk
chns168.courseresource.yale.edu
dns-vetting1d.map.fastly.net
5731563417370624-fe3.pantheonsite.io
twentythree.net
dns-vetting1d.map.fastly.net
dev.embody.yale.edu
expeditions.sandiegozoo.org
club.kjzz.org
ida.dk
dns-vetting1d.map.fastly.net
twentythree.net
dev.wellness.yale.edu
5645240186699776-fe4.pantheonsite.io
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
5691420614590464-fe3.pantheonsite.io
ida.dk
5691420614590464-fe3.pantheonsite.io
dns-vetting1d.map.fastly.net
5761673931522048-fe1.pantheonsite.io
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
link.ida.dk
twentythree.net
twentythree.net
ida.dk
5731563417370624-fe3.pantheonsite.io
techfestival.ida.dk
twentythree.net
twentythree.net
dns-vetting1d.map.fastly.net
barselsberegnerdk.viscom.ida.dk
twentythree.net
dns-vetting1d.map.fastly.net
twentythree.net
twentythree.net
5648161435549696-fe2.pantheonsite.io
5731563417370624-fe3.pantheonsite.io
twentythree.net
connect.iadb.org
link.ida.dk
twentythree.net
dns-vetting1d.map.fastly.net
dns-vetting1d.map.fastly.net
twentythree.net
*.ida.dk
*.udv.ida.dk
5731563417370624-fe3.pantheonsite.io
5761673931522048-fe1.pantheonsite.io
5645240186699776-fe4.pantheonsite.io
fordele.ida.dk
twentythree.net
outplacement.ida.dk
acadmintest.cuofco.org
twentythree.net
fordele.ida.dk
5645240186699776-fe4.pantheonsite.io
5691420614590464-fe3.pantheonsite.io
nielsbohrstaging.ida.dk
dns-vetting1d.map.fastly.net
medlem.ida.dk
twentythree.net
twentythree.net
dns-vetting1d.map.fastly.net
dns-vetting1.map.fastly.net
5731563417370624-fe3.pantheonsite.io
5761673931522048-fe1.pantheonsite.io
5761673931522048-fe1.pantheonsite.io
5691420614590464-fe3.pantheonsite.io
dns-vetting1d.map.fastly.net
5648161435549696-fe2.pantheonsite.io
twentythree.net
dns-vetting1d.map.fastly.net
5691420614590464-fe3.pantheonsite.io
twentythree.net
twentythree.net
5761673931522048-fe1.pantheonsite.io
dns-vetting1d.map.fastly.net

Certificate

The complete raw certificate details for techfestival1.ida.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGXzCCBUegAwIBAgISBOV1UFiaiL6U7Ho1NDH4iDtuMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MDEwMTA4MDRaFw0x
OTA5MjkwMTA4MDRaMB8xHTAbBgNVBAMTFHRlY2hmZXN0aXZhbDEuaWRhLmRrMIIC
IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA6WSEMSh+Ajf2MWBCnwC/0FbV
C5Y89E+DdvQo/aowPBohd8nQCrcJZVVIYsJQfWqfPAkNKsT6I+wk+MHPLcYUJXMe
NeMy8yLrdf+K3l6Dtv24dgzoMEi+HE0L3B9suU0D9Jo7t6mCPr/G7Pbvhzsp1qoD
umZLQYgjB7Yy8kVuyGsIg9dqQNv3DS9Kdte/9kxrUdecQvzo8I5fxwUp5j583vb0
Slpz09BC+4Who4XCYMXG4Fbt8VOrZVBoMmR9h5j3sg7zKm7FK5wMp1iYPH1VZ8ox
6YVq4DMixsOeaSrfmFGWOfRyht4JO6zJPjpCUrOtZzY17E95RNy+TaD9/vEcsu9W
4e1wUaHD2yKO9BjPaM3gM3MtGpH2FJ9nYp9O3VkzLPyCJH8LdCtV1OcUdxESBSDT
jO8KzorQ9gfY1Vwnuh6ul631r2PSOLjeRb44TYN3XyfyMJFNPhfWPVHizZIs1XYR
bAw/rZu2VHST37JQ/fdL+DDRulJoXgJRD7ct0BezBZ8XX1ytc9aKfFUj6CVS2TRE
JcY9JLXfi4oTR3ERKANdw8J5qokl4RJbMpi6i2IybDMwON3DUYeGxN1N301OEI9/
5Ld60Qku0qXn4jB7c2j7KlCDU4XWcltTrocW++L/WYA5DMnzwGB+eVU8g8jiAOxB
lAwa615X32A5G74TBL0CAwEAAaOCAmgwggJkMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQU1pi6VD4z2CnhPFI9p7azzYZz318wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3
pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2Nz
cC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2Vy
dC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAfBgNVHREEGDAWghR0ZWNoZmVzdGl2
YWwxLmlkYS5kazBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAo
MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisG
AQQB1nkCBAIEgfQEgfEA7wB2AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQ
e8xWAAABa6tKCYcAAAQDAEcwRQIgZrFSdeKTBULtgcMPvb1B9vh4cwDgIpqr+uQP
DBs7i0wCIQDOslNtRFJalYxQYAjLliPNjhsE+Zgd0qVWHIPvetiGMQB1AGPy283o
O8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAABa6tKCWwAAAQDAEYwRAIgH/Iw
0G60rbPq3xzt85CAL9hdZzy2Rsvtbp2PwKSEvbQCICYfqgN+JnhNW4xP/J0uef6w
NYk/AnNdi6Xa5frDPmDRMA0GCSqGSIb3DQEBCwUAA4IBAQA8bbW86/mDmtrKKwsA
Fu01B0+hOeheUFz4a/Stqq295okOvWhwjPS6/c9V91lqGWDJ3lqQ8VEDLmvWfXqB
TGhaalUR5X+y4sc0MrlWK9XWdrqq6PqN4FZ9Fz9G22IAF8z9NdDxYjz1Rwiryi9t
DKz6ecB+OpCcJcNcEKx/WRfrJSZQUN4g5AAtkMKGqOMCqCMVTXdVLSUFwmYPbOV/
NX1uN0/am5L89gWy+jA6oipBxtSVwkR6fiAO+0REg3BSHLgjclncHIdxZ1ZmYc6G
9XVRSSG349c2GaLJ7brsbghQhvYe6bdeLx/wKILoM4GstZFSYwj6+Wo5/cTczny2
SiRZ
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 426529742608286915172006023051556919196526
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-01 01:08:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-29 01:08:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'techfestival1.ida.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 952158907822876665381803771305076829989106958646272872490402051610277786748676884505992291415557472386119996668563566797260966438628035482947971601639764541576910400045128107237679652483215520772303796947503513631926258227529973976291383375032126662515738479851765783763939415243198061165959890729071403056875094266670679776931149447096511524570423386237631506186374256863596515095790390019923724079144750174567205292528034507823589263221218038224960446633440555350299445838368900440997810427552671278731342384845714202599566325730764621631703802667415122046430659436606266647063014123153215065509401735411576818442132790240510364448552864339394183737733992876204858360685092256416729639921207358751355240544262705227348067330651894219225598216456816407209966197916383930975769582254387681597598130962267647880658004459675966684655043458742987826443613081104160564861649991135536023246168573192205742302368928388511604077437536392912793121231472826101540304409936001020437000595181987325818074678097844327729580794565368279766501408803985688535971765543375964031565376044776258448392689975735645516262118293799919083937575824877547172023503137507783856400972189763045898204208125283096966039386508254585407139653559766265342268212413
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d698ba543e33d829e13c523da7b6b3cd8673df5f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techfestival1.ida.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016bab4a09870000040300473045022066b15275e2930542ed81c30fbdbd41f6f8787300e0229aabfae40f0c1b3b8b4c022100ceb2536d44525a958c506008cb9623cd8e1b04f9981dd2a5561c83ef7ad8863100750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016bab4a096c000004030046304402201ff230d06eb4adb3eadf1cedf390802fd85d673cb646cbed6e9d8fc0a484bdb40220261faa037e26784d5b8c4ffc9d2e79feb035893f02735d8ba5dae5fac33e60d1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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