gruenderszene.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1b:0b:ba:e2:a2:ca:81:39:47:dd:b8:49:e5:46:c5:04:c2 was issued on by Let's Encrypt.

With 26 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gruenderszene.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1b:0b:ba:e2:a2:ca:81:39:47:dd:b8:49:e5:46:c5:04:c2
Serial Number (int): 270540073574037604952427226905245236135106
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b2:01:59:f3:5d:cd:ac:71:55:f5:a2:83:c5:e8:1e:7b:10:00:d4:21
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c0:c7:de:e7:07:1f:20:1d:6d:60:92:80:5b:30:16:a7:f6:d7:78:e1
Fingerprint (sha256): 02:80:cd:77:1e:a6:a4:9c:05:4c:aa:53:c2:61:ca:06:6b:02:32:e6:d8:fb:d4:8e:d0:57:44:94:24:da:25:ca

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gruenderszene.de

26

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gruenderszene.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.verticalmedia.com
app.gruenderszene.de
auth.verticalmedia.com
awards.gruenderszene.de
cdn0.gruenderszene.de
cdn1.gruenderszene.de
cdn2.gruenderszene.de
cdn3.gruenderszene.de
cdn4.gruenderszene.de
dailynewsletter.gruenderszene.de
events.welt.de
events.welt.gruenderszene.de
gruenderszene.de
gs-admin.gruenderszene.de
gsapp01.gruenderszene.de
gsapp02.gruenderszene.de
gsapp03.gruenderszene.de
gsapp04.gruenderszene.de
gscache01.gruenderszene.de
gscache02.gruenderszene.de
hapi.verticalmedia.com
newsletter.gruenderszene.de
print.ngin-food.com
print.ngin-mobility.com
ranking.gruenderszene.de
search.gruenderszene.de

Other certificates including the domain name gruenderszene.de

(limited to 100 certificates)
test.gruenderszene.de
www.gruenderszene.de
www.test.gruenderszene.de
gruenderszene.de
gruenderszene.de
test4.gruenderszene.de
test2.gruenderszene.de
test3.gruenderszene.de
employer.gruenderszene.de
www.test2.gruenderszene.de
test8.gruenderszene.de
gruenderszene.de
support.gruenderszene.de
www.test3.gruenderszene.de
www.test2.gruenderszene.de
gruenderszene.de
gruenderszene.de
gruenderszene.de
test5.gruenderszene.de
test.gruenderszene.de
test4.gruenderszene.de
www.test8.gruenderszene.de
www.gruenderszene.de
gruenderszene.de
premium.gruenderszene.de
www.test.gruenderszene.de
test4.gruenderszene.de
test.gruenderszene.de
www.test3.gruenderszene.de
gruenderszene.de
www.test2.gruenderszene.de
test3.gruenderszene.de
gruenderszene.de
test2.gruenderszene.de
shortcode-layout.stage.amp.gruenderszene.de
gruenderszene.de
dinner.gruenderszene.de
deploy-me.stage.amp.gruenderszene.de
www.gruenderszene.de
dinner.gruenderszene.de
test2.gruenderszene.de
gruenderszene.de
www.test.gruenderszene.de
www.test.gruenderszene.de
www.test.gruenderszene.de
gruenderszene.de
gruenderszene.de
www.test4.gruenderszene.de
www.test.gruenderszene.de
test2.gruenderszene.de
test2.gruenderszene.de
gsapp01.gruenderszene.de
www.test6.gruenderszene.de
www.test8.gruenderszene.de
dinner.gruenderszene.de
shortcode-layout.stage.amp.gruenderszene.de
www.hs.gruenderszene.de
dev.gruenderszene.de
gruenderszene.de
test2.gruenderszene.de
www.hs.gruenderszene.de
www.test.gruenderszene.de
www.hs.gruenderszene.de
test.gruenderszene.de
spaetschicht.gruenderszene.de
support.gruenderszene.de
gruenderszene.de
test7.gruenderszene.de
test2.gruenderszene.de
www.test.gruenderszene.de
gruenderszene.de
gruenderszene.de
gruenderszene.de
www.test2.gruenderszene.de
test3.gruenderszene.de
gruenderszene.de
gruenderszene.de
awards.gruenderszene.de
test8.gruenderszene.de
www.test4.gruenderszene.de
premium.gruenderszene.de
gruenderszene.de
www.test5.gruenderszene.de
gruenderszene.de
gruenderszene.de
premium.gruenderszene.de
gruenderszene.de
test2.gruenderszene.de
gruenderszene.de
premium.gruenderszene.de
www.test.gruenderszene.de
gruenderszene.de
test3.gruenderszene.de
gruenderszene.de
www.test3.gruenderszene.de
www.test3.gruenderszene.de
gsapp01.gruenderszene.de
test6.gruenderszene.de
gruenderszene.de
stage2.gruenderszene.de

Certificate

The complete raw certificate details for gruenderszene.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270540073574037604952427226905245236135106
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-28 09:50:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-27 09:50:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gruenderszene.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 754867404185126009571272043588366194549431461614972570235838709649729183062035993854764549014624350367536420753595131839716084709126023839846562333659651547245390380498994890169273255346765715639121765930590573297464570365042105821375497686831091528685515890878776662547819751159364325191158728486306808285200187060288324758738590554976275434900344288218698927339914321719492812882539112646468063344323809059485328948389672512088948843132840226783465533117050108073918057558582164628670075174316308168055835484214531772346393964043393171871847822180502001650378837891386750684125774791111681316471918583855735158245569660297638637938178679193822298225020074312252595657991316592730707718967357243595748617159589051897443029817714557697726516728169313681137545971256635006549367066125369425818528089746845704114063078783298883645195419993759048237900812196045512287132660820165845724282543495479347731688333314072366437857788578196967561268420483063312019882577287312885929522461186005598777423311730090897857126775314226230010664724629219550068159203854364034496709188023442167274219452423244738783257747115067390017351812894138327957025171808927779276426387058733229964897541289139716266340998107024210216057259348074258725403149461
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b20159f35dcdac7155f5a283c5e81e7b1000d421
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (648 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.verticalmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.gruenderszene.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.verticalmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awards.gruenderszene.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn0.gruenderszene.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn1.gruenderszene.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2.gruenderszene.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn3.gruenderszene.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn4.gruenderszene.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailynewsletter.gruenderszene.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.welt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.welt.gruenderszene.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gruenderszene.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gs-admin.gruenderszene.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsapp01.gruenderszene.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsapp02.gruenderszene.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsapp03.gruenderszene.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsapp04.gruenderszene.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gscache01.gruenderszene.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gscache02.gruenderszene.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hapi.verticalmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.gruenderszene.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'print.ngin-food.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'print.ngin-mobility.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranking.gruenderszene.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.gruenderszene.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001661fcd513d0000040300473045022100b029ef93000a0aaf4a8c903a102004fe9d6a55ec73fa86b5d6c323b1b9a5f0ae02202b5bc4caeac5a48c05669287e32689b2440a6b4056d3db5f9a3712288c0e6890007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001661fcd52f00000040300473045022100aaa10917377a4b5a99fb50c5caf97ac3d0fe5e5defa92e801a2ae990416cd09002204fcb3cffedeea7c87386b63b4d3604405cd9b4d87d27795796d7f244652d3c70
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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