platform.sparkinfluence.net

Issued by R3

About this certificate

This digital certificate with serial number 03:77:79:58:34:82:3f:a7:4c:af:21:13:db:60:eb:61:fa:e4 was issued on by Let's Encrypt.

With 35 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=platform.sparkinfluence.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:77:79:58:34:82:3f:a7:4c:af:21:13:db:60:eb:61:fa:e4
Serial Number (int): 301991754033490603302568210845598243486436
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f2:ea:cf:e0:02:53:ce:af:ab:cb:df:9e:ef:a0:95:51:16:11:e9:47
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 39:e0:24:f9:b3:53:ce:6e:f3:ef:7a:ea:ac:fc:19:93:d7:76:bc:84
Fingerprint (sha256): 05:e0:dc:fb:eb:22:39:38:eb:ce:64:18:8e:9f:9b:6d:c6:80:0c:f3:01:af:13:8b:91:f4:e0:55:a2:20:9c:17

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate platform.sparkinfluence.net

35

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for platform.sparkinfluence.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

act.physiciansgrassrootsnetwork.org
action.blochforirving.com
action.cancersupportcommunity.org
action.choosemycare.org
action.lungevity.org
action.nearbycare.org
action.orpca.org
action.peopleforbikes.org
action.progresschamber.org
action.ridersalliance.org
action.vinylsiding.org
action.williams.com
advocacy.chcanys.org
advocacy.kidney.org
advocacy.massmutual.com
givetoadpac.ada.org
groundswellstrat.com
investwanow.org
magna.action.magnasvoice.com
makeurvoiceheard.com
platform.sparkinfluence.net
savehealthcareinwa.org
spark.savebostonswaterfront.com
usgr.smiths.com
voices.kidney.org
www.aahoa-pac.com
www.autocareadvocacy.org
www.boatingunited.org
www.cnavoices.org
www.investwanow.org
www.magnasvoice.com
www.makeurvoiceheard.com
www.savehealthcareinwa.org
www.spiritsunited.org
www.wateraccessproject.com

Other certificates including the domain name sparkinfluence.net

(limited to 100 certificates)
platform.sparkinfluence.net
platform.sparkinfluence.net
oivi.sparkinfluence.net
peopleforbikes.org
mps.sparkinfluence.net
asn.sparkinfluence.net
oivi.sparkinfluence.net
platform.sparkinfluence.net
mps.sparkinfluence.net
dev.sparkinfluence.net
platform.sparkinfluence.net
platform.sparkinfluence.net
peopleforbikes.org
oivi.sparkinfluence.net
terminal-demo.sparkinfluence.net
oivi.sparkinfluence.net
asn.sparkinfluence.net
*.sparkinfluence.net
sparkinfluence.net
sparkinfluence.net
mps.sparkinfluence.net
pmiusa.sparkinfluence.net
oivi.sparkinfluence.net
*.sparkinfluence.net
platform.sparkinfluence.net
*.sandbox.sparkinfluence.net
pmiusa.sparkinfluence.net
*.sparkinfluence.net
oivi.sparkinfluence.net
oivi.sparkinfluence.net
dev.sparkinfluence.net
alpapac.sparkinfluence.net
asn.sparkinfluence.net
mps.sparkinfluence.net
dev.sparkinfluence.net
*.sparkinfluence.net
platform.sparkinfluence.net
peopleforbikes.org
platform.sparkinfluence.net
platform.sparkinfluence.net
default.sparkinfluence.net
peopleforbikes.org
default.sparkinfluence.net
pmiusa.sparkinfluence.net
platform.sparkinfluence.net
*.sandbox.sparkinfluence.net
*.sparkinfluence.net
pmiusa.sparkinfluence.net
platform.sparkinfluence.net
kb.sparkinfluence.net
oivi.sparkinfluence.net
mps.sparkinfluence.net
peopleforbikes.org
asn.sparkinfluence.net
peopleforbikes.org
dev.sparkinfluence.net
peopleforbikes.org
dev.sparkinfluence.net
mps.sparkinfluence.net
mps.sparkinfluence.net
dev.sparkinfluence.net
staging.mailer.sparkinfluence.net
asn.sparkinfluence.net
oivi.sparkinfluence.net
default.sparkinfluence.net
platform.sparkinfluence.net
oivi.sparkinfluence.net
*.sparkinfluence.net
*.sparkinfluence.net
platform.sparkinfluence.net
mps.sparkinfluence.net
sparkinfluence.net
oivi.sparkinfluence.net
platform.sparkinfluence.net
platform.sparkinfluence.net
default.sparkinfluence.net
dev.sparkinfluence.net
peopleforbikes.org
*.sparkinfluence.net
*.app.sparkinfluence.net
oivi.sparkinfluence.net
sparkinfluence.net
pmiusa.sparkinfluence.net
platform.sparkinfluence.net
platform.sparkinfluence.net
sparkinfluence.net
dev.sparkinfluence.net
dev.sparkinfluence.net
mps.sparkinfluence.net
oivi.sparkinfluence.net
asn.sparkinfluence.net
features.sparkinfluence.net
asn.sparkinfluence.net
default.sparkinfluence.net
default.sparkinfluence.net
platform.sparkinfluence.net
pmiusa.sparkinfluence.net
pmiusa.sparkinfluence.net
dev.sparkinfluence.net
peopleforbikes.org

Certificate

The complete raw certificate details for platform.sparkinfluence.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15MIsT9cpDH9zBHfYXWb
f57c7bpBKOb6iA1eynkPg+1pjSzss5/f1Rz6iU9bPsVgWQipZU1+aoEVZdBRY/zM
YU+tK3BRtAqxMbfSLgHGckm0JRID14BVuY+1lkbZvSLB/OLq/eH8HogiP3txa69B
FjhnKgqaPp9bzcX4PNg1yGkklE9ygm/VLtixw535IhTorup0UuGq87rKGHIuSPjQ
Qbl9VmHMJKX9eUxzfYYeUEqU7hG4P3ucPG6vEz6ZAjxb1kCkoS7qk+FHKLfyY+rv
w0blVo+Yz2uYLUdR60vlDd2Kkiu38FmKQNi8Ocvu/l261xRJJov8302caqpHEaBE
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301991754033490603302568210845598243486436
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-02 15:52:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-31 15:52:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'platform.sparkinfluence.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27213740713010921511966956190144682164919216772483451401253348449245815264322611822189143112641589798829512890302842056864827426530618789736901633449496505525086690833812102627564343311019641442422842138455830136362020840174007270893756242119287188736895928374981564741556940554188255762295668503526059431520846406481516524532597802129650390736993471782638079832119725683385765384661033601054311344924422661225759350374372544797282543336060064496911007225385401090695786672839645177128361061672538386122970015757756819535914783724762235383193598572076637432380726799913899686008766414353563503322386705982787602629709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f2eacfe00253ceafabcbdf9eefa095511611e947
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (854 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.physiciansgrassrootsnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.blochforirving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.cancersupportcommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.choosemycare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.lungevity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.nearbycare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.orpca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.peopleforbikes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.progresschamber.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.ridersalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.vinylsiding.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.williams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advocacy.chcanys.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advocacy.kidney.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advocacy.massmutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givetoadpac.ada.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groundswellstrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investwanow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magna.action.magnasvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makeurvoiceheard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platform.sparkinfluence.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savehealthcareinwa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spark.savebostonswaterfront.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usgr.smiths.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voices.kidney.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aahoa-pac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autocareadvocacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boatingunited.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cnavoices.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investwanow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magnasvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makeurvoiceheard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.savehealthcareinwa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiritsunited.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wateraccessproject.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186a33d063e0000040300463044022017184fa6b9cc31e162d57ff8336cfe9027973ef17f1599dcc4d580d436e8ade1022053233758fdf1a865b416d1a6788c4788c24dd91f106bc592a6b486614b82061e007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000186a33d063f000004030047304502203eaf308ccd2a1e1b6afd6adacb61febab3d842408699150306bb66770c2bc9a7022100b3df2b531bd9027cee7cf2887c4103929f0993b97a58e31684d40e0e94029d58
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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