www.centrepompidou.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:01:e0:51:17:6c:b5:ca:97:fc:1e:f6:6d:b3:94:bb:1b:81 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.centrepompidou.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:01:e0:51:17:6c:b5:ca:97:fc:1e:f6:6d:b3:94:bb:1b:81
Serial Number (int): 261975308284411365022953780201331925654401
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ad:1a:32:26:61:2c:f9:91:0b:30:ae:62:8f:6a:4a:91:8a:4e:3e:fd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): aa:20:a3:d2:49:8f:08:38:54:cd:48:f6:3b:e2:bd:9b:7d:82:62:19
Fingerprint (sha256): 02:aa:7e:f6:09:35:5d:66:57:54:5e:04:28:43:43:34:23:ff:1b:22:10:d1:a8:3c:c0:f7:a0:a3:07:77:f9:f8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.centrepompidou.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.centrepompidou.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.centrepompidou.fr

Other certificates including the domain name centrepompidou.fr

(limited to 100 certificates)
www.centrepompidou.fr
media.iri.centrepompidou.fr
collection.centrepompidou.fr
collection.centrepompidou.fr
www.iri.centrepompidou.fr
information.centrepompidou.fr
www.iri.centrepompidou.fr
amisducentrepompidou.fr
www.iri.centrepompidou.fr
media.iri.centrepompidou.fr
collection.centrepompidou.fr
www.iri.centrepompidou.fr
editions.centrepompidou.fr
courriel.centrepompidou.fr
www.centrepompidou.fr
collection.centrepompidou.fr
ldt.iri.centrepompidou.fr
bilan-activite-2018.centrepompidou.fr
ldt.iri.centrepompidou.fr
collection.centrepompidou.fr
media.iri.centrepompidou.fr
collection.centrepompidou.fr
cosmopolis.centrepompidou.fr
ldt.iri.centrepompidou.fr
voeux.centrepompidou.fr
boutique.centrepompidou.fr
videotrottoir.centrepompidou.fr
www.iri.centrepompidou.fr
boutique.centrepompidou.fr
amisducentrepompidou.fr
collection.centrepompidou.fr
information.centrepompidou.fr
*.billetterie.centrepompidou.fr
www.centrepompidou.fr
billetterie.centrepompidou.fr
www.iri.centrepompidou.fr
amisducentrepompidou.fr
centrepompidou.fr
www.centrepompidou.fr
cosmopolis.centrepompidou.fr
media.iri.centrepompidou.fr
ldt.iri.centrepompidou.fr
www.centrepompidou.fr
amisducentrepompidou.fr
collection.centrepompidou.fr
collection.centrepompidou.fr
amisducentrepompidou.fr
ldt.iri.centrepompidou.fr
collection.centrepompidou.fr
amis.centrepompidou.fr
centrepompidou.fr
hybrid.centrepompidou.fr
media.iri.centrepompidou.fr
ldt.iri.centrepompidou.fr
ldt.iri.centrepompidou.fr
cosmopolis.centrepompidou.fr
cosmopolis.centrepompidou.fr
*.centrepompidou.fr
centrepompidou.fr
media.iri.centrepompidou.fr
boutique.centrepompidou.fr
ldt.iri.centrepompidou.fr
collection.centrepompidou.fr
amisducentrepompidou.fr
collection.centrepompidou.fr
bilan-activite-2018.centrepompidou.fr
centrepompidou.fr
api.centrepompidou.fr
boutique.centrepompidou.fr
ldt.iri.centrepompidou.fr
www.centrepompidou.fr
cosmopolis.centrepompidou.fr
centrepompidou.fr
media.iri.centrepompidou.fr
amisducentrepompidou.fr
amisducentrepompidou.fr
billetterie.centrepompidou.fr
collection.centrepompidou.fr
boutique.centrepompidou.fr
www.iri.centrepompidou.fr
centrepompidou.fr
bilan-activite-2018.centrepompidou.fr
invitations.centrepompidou.fr
ldt.iri.centrepompidou.fr
ldt.iri.centrepompidou.fr
centrepompidou.fr
ldt.iri.centrepompidou.fr
*.centrepompidou.fr
ldt.iri.centrepompidou.fr
billetterie.centrepompidou.fr
*.billetterie.centrepompidou.fr
centrepompidou.fr
media.iri.centrepompidou.fr
amis.centrepompidou.fr
webmail.centrepompidou.fr
ldt.iri.centrepompidou.fr
centrepompidou.fr
voeux.centrepompidou.fr
media.iri.centrepompidou.fr
amisducentrepompidou.fr

Certificate

The complete raw certificate details for www.centrepompidou.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGYDCCBUigAwIBAgISAwHgURdstcqX/B72bbOUuxuBMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMjIxNzAzMDNaFw0y
MDAyMjAxNzAzMDNaMCAxHjAcBgNVBAMTFXd3dy5jZW50cmVwb21waWRvdS5mcjCC
AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMmLJtUl3IqZWSiCMKTg1f4C
fs57FaRYmh8LF6uU3ACaKWBP7d4gzZSxo6ZA+rCgVVJxSKjz1R78hP5K/iFTzmgN
6/B6P0qvnT+I4iUSv5LIfrJQdygiqOt4tAbEO6hqmNclIezYUOBEZ8xNPIPsQavn
vXASDD6IK4d/q4kMVDr1UMuCE15J6J6UNmVos/LOf6WsT37q3MCrPO6bCIlGWOtq
Sf/KZcKJNmCVDAlUt+zY4J787DxKSPAXZ7v2qhps/dkRjIlUeH+gymGAgO41ga6I
NGlwpTKiijf7K7XQeeSAQgkuGT9VLu40HAmi35eSdwsMYqsRxgsOeAb7oohLmEFp
x25VfusnlHGE4WRG1oOxGErVtZb7LFU00CsSRFWf9bNFJDfFz18KSw2VctkH+xHV
ePYc+cXIcD+v8AHm8jlR8tgN/TvJDYDAeNZw5Xo8BeNt5LNngXdWb9YtP3DPfrzh
r5vboflfH+GOsXzMX6ay3kcvI/gI068Q7Pc3WpkF5fF75XGmZG8IUBeH607eeSeN
/iNxyTJSHn/bYDBto4dLTRUp0zauAT6R/9YePPcwrADPFwuaOvksn8hXQweIApE3
s7sj4X85j/lWIFaG/bMQfJkCoHN8rCyVduL8qfcm/0URkYb7Qg5btzIj7WoaCqda
+7Uw5+nvzAh4ZgfnynPLAgMBAAGjggJoMIICZDAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O
BBYEFK0aMiZhLPmRCzCuYo9qSpGKTj79MB8GA1UdIwQYMBaAFKhKamMEfd265tE5
t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29j
c3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2Nl
cnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wIAYDVR0RBBkwF4IVd3d3LmNlbnRy
ZXBvbXBpZG91LmZyMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB
MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAgYK
KwYBBAHWeQIEAgSB8wSB8ADuAHUAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1
loFxRVgAAAFulEgcNgAABAMARjBEAiAEdgzgAZevu9jyK51MkHOIY3WWLAVZgIL0
6PWOLU3o7AIgebZAZSNm2riFTF/Z+MUD+HjJD11dHILlkg/JtehuVo0AdQAHt1wb
5X1o//Gwxh0jFce65ld8V5S3au68YToaadOiHAAAAW6USBxVAAAEAwBGMEQCIDO0
FdVLZ2EL+me8OHxGmYGNbJkQSd3OeC/g4xMlfcdtAiALWcPa6DCLxn9f6fEGv0Ne
DCcatXnl/MmMm62+CB0trTANBgkqhkiG9w0BAQsFAAOCAQEAT1pcIfbQjeMzWLFQ
xJd13gOghzHF6/+Wrp97EmBagqG5FAg8nYLiiT6b/Y1iGLxmwY5UpQjKVhPgBO08
AIq3OfzAR58gu/ofDCov3ccs+hRn4CPTTqhRpHED/As6M5+3c7/4maOAUZrbzb/L
SpmCUUZ8yuJUJZq154xRsd+hd94TAC1hv7BHfNhTT8KL3zr8eBYNalTsp9bU6SGn
HcnHQaaq92V/4xYr9ZjlKuBIWzMKxErpo/oZ0cPOu2Nok1ru1zn9oFCyHNIrSoKJ
9zNhic5BghEUiJuqhPVDNpNR0PfAGfzO3IOJJqPQXubznfJs6Dj/r3L+/qilBn2S
f0dbpw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261975308284411365022953780201331925654401
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-22 17:03:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-20 17:03:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.centrepompidou.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 822225994258643124027815947244712478641877739365276973251519844695532424686908983435247137661382664174205513155989056155170342286136417774453394025425008521763825988027827139564661153834692205102163766112624241291608828120432161965948845412345733558508956691126230151667100715948938224154642376305676547746775516415920693504692298734942096483133998960642416408913946269256652956191857054546019203308516283933247560535860929223313053790016911513374107000397994873976601793747719155435366214358952387056936520346343961305333804785307007174349014054398415736804537244671016568905340248991020303272321491661869507638299350105962182060667897662701628966708446402794900489500105961213084214930077038770571503577857235170572095559189863909978982760136891599407372178757817810503970274832135452458407514434351996347194228392980349528888174750776097833274683319698508958550234054557778795928060485445349849382520413569031106592895114868030298767124850192802985534345306275117700208586693480007574481882839926551795688152578231369627935198712160870699811201184894363650088503956197445695533500819066225203345031488010028478618859374820175996238157331191987931325619465726068878005907254611593361545866416234099905670252250831884435832754041803
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ad1a3226612cf9910b30ae628f6a4a918a4e3efd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centrepompidou.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e94481c360000040300463044022004760ce00197afbbd8f22b9d4c9073886375962c05598082f4e8f58e2d4de8ec022079b640652366dab8854c5fd9f8c503f878c90f5d5d1c82e5920fc9b5e86e568d00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e94481c550000040300463044022033b415d54b67610bfa67bc387c4699818d6c991049ddce782fe0e313257dc76d02200b59c3dae8308bc67f5fe9f106bf435e0c271ab579e5fcc98c9badbe081d2dad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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