www.overcast.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f6:a1:84:ae:b3:72:83:ca:47:bc:53:25:46:e3:fa:5c:46 was issued on by Let's Encrypt.

With 46 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.overcast.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f6:a1:84:ae:b3:72:83:ca:47:bc:53:25:46:e3:fa:5c:46
Serial Number (int): 345261014691694852745733622548346472913990
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 81:5e:06:1b:61:86:71:7c:1f:15:55:dd:fa:22:df:0b:c6:be:20:51
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 97:41:ff:c9:1d:fc:2d:09:a8:fe:2c:cc:86:b7:39:ec:e1:33:f6:45
Fingerprint (sha256): 06:0a:78:19:03:f8:ba:7b:bd:dd:8e:4f:2f:5f:61:da:a1:70:99:7f:66:95:dd:ab:9d:0d:3a:0d:9b:e9:c7:f6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.overcast.io

46

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.overcast.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akureyri.elding.is
annualreport2017.hsorka.is
arsskyrsla2014.hsorka.is
arsskyrsla2015.atvr.is
arsskyrsla2015.hsorka.is
arsskyrsla2016.atvr.is
arsskyrsla2016.hsorka.is
arsskyrsla2017.atvr.is
arsskyrsla2017.hsorka.is
arsskyrslur.is
atvr2017.overcast.is
audlindagardurinn.is
fridarsetur.is
garri.is
gestur.is
hhiweb.overcast.is
hsorka.is
icelandsif.is
islandsbanki.overcast.is
kjarninn.is
leslistinn.is
overcast.io
overcast.is
resourcepark.is
reykjavik.elding.is
snjallraedi.is
tokyo.is
vesturverk.is
vesturverk.overcast.is
vis.overcast.is
www.arsskyrslur.is
www.audlindagardurinn.is
www.borgarleikhus.is
www.fridarsetur.is
www.garri.is
www.gestur.is
www.hsorka.is
www.icelandsif.is
www.kjarninn.is
www.leslistinn.is
www.overcast.io
www.overcast.is
www.resourcepark.is
www.snjallraedi.is
www.tokyo.is
www.vesturverk.is

Other certificates including the domain name overcast.io

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.overcast.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1cBNQZyT5cbhJkWgaYD
ajYm0ORyi/EZjqVEjgjgkTjFZ22O2/sZzre3GYbSShvfVvmqCl3rIOa/iBJVwpV/
Mj1qgh7hArJCmzhkLCL3OJXulLZjUPxPUifAXNOVaEZeJ2vR3RPKKEpnHGaCEP/a
RDBGGSbIHEwwdf5NWUI9uL1yzUn0xKQ6eNiI4bH6zocwQARwF+38rDDtWGpCyXoU
qj8GAJ4tk9ejevMxRPlk0SEn46APHss9rUAhO4s7CHWg0a3p3Bb2JTXuHh30xjYH
sHXyLGhIOitBL8H45TRXG22OBJb+TlC5g1rik5Brg/pSgKcbYOFczuH3oIlLQa2f
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345261014691694852745733622548346472913990
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-02 09:08:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-31 09:08:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.overcast.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24659373092560518873045880052332439180162378727083485300496542917673414706062912389401320220333812686647646509430812681723708915595647377049402494036960339375263299148121816215657757676554524039450889374457282081008900955972447645321282397555486664759655767355600090706733217232447328920772719845514185233659687932436509962544047526802752438697105778283934632252928531465960550942766241321444802936204832786635687069946465864569407486747638462822416485203323817776081631360992743978775615711460369998018749318758830724334749966168102131787105243066543710635142779618966565061369451072931563064495655297975653883551553
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							815e061b6186717c1f1555ddfa22df0bc6be2051
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (866 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akureyri.elding.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annualreport2017.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2014.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2015.atvr.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2015.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2016.atvr.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2016.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2017.atvr.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrsla2017.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsskyrslur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atvr2017.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audlindagardurinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fridarsetur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garri.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gestur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhiweb.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icelandsif.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'islandsbanki.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kjarninn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leslistinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overcast.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resourcepark.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reykjavik.elding.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snjallraedi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokyo.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vesturverk.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vesturverk.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vis.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arsskyrslur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.audlindagardurinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.borgarleikhus.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fridarsetur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.garri.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gestur.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsorka.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icelandsif.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kjarninn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leslistinn.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.overcast.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.overcast.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resourcepark.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snjallraedi.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tokyo.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vesturverk.is'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000163205308fa0000040300473045022016dad37a1110842f13a6be27d1e821bdb09dfa1a009af6634d3774c7fc0a926f022100a0d0c53bec636079aa934eade47dbda3f5d491c5a18861567c7bb29b99e36517007600a4501269055a15545e6211ab37bc103f62ae5576a45e4b1714453e1b22106a2500000163205308fa000004030047304502204c5be8d423dfe67ce5eebf798f9d5d0eb83a338f135db70a3db13dfc4e0aba7c022100c9fb8be29255960ffc4138a5c7a972c68835de22d9dfe59a3970ef9019d5b947
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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