shop-dev.kinepolis.fr

Issued by R3

About this certificate

This digital certificate with serial number 03:1a:d5:16:aa:54:9b:60:59:21:93:e9:f0:5b:a3:5d:3e:8f was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=shop-dev.kinepolis.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1a:d5:16:aa:54:9b:60:59:21:93:e9:f0:5b:a3:5d:3e:8f
Serial Number (int): 270467442583571099763348962638626801139343
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ec:42:a0:ff:87:3b:3d:49:55:8d:8c:18:05:2c:de:c5:7a:eb:0b:54
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): bf:87:00:0f:89:7e:0f:e9:df:f2:26:78:5e:c0:e3:b2:b6:46:73:9a
Fingerprint (sha256): 08:62:29:33:c6:5e:08:bc:c5:29:43:03:47:1d:ae:94:3a:d5:ec:3e:dd:22:15:3a:fe:7b:fa:59:b3:40:7c:52

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate shop-dev.kinepolis.fr

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shop-dev.kinepolis.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shop-dev.kinepolis.be
shop-dev.kinepolis.es
shop-dev.kinepolis.fr
shop-dev.kinepolis.lu

Other certificates including the domain name kinepolis.fr

(limited to 100 certificates)
kinepolis.lu
kinepolis.lu
shop.kinepolis.be
tickets.kinepolis.be
kinepolis.lu
kinepolis.biz
shop-dev.kinepolis.be
kinepolis.biz
kinepolis.biz
tickets.kinepolis.be
shop-dev.kinepolis.be
shop-dev.kinepolis.fr
shop.kinepolis.be
kinepolis.biz
kinepolis.fr
tickets.kinepolis.be
shop.kinepolis.be
kinepolis.megatix.be
shop.kinepolis.be
kinepolis.megatix.be
*.kinepolis.fr
tickets.kinepolis.be
shop-dev.kinepolis.be
kinepolis.biz
kinepolis.biz
shop.kinepolis.be
shop-dev.kinepolis.fr
kinepolis.lu
*.kinepolis.fr
shop.kinepolis.be
kinepolis.biz
kinepolis.biz
kinepolis.biz
kinepolis.fr
kinepolis.lu
shop.kinepolis.be
shop-dev.kinepolis.fr
shop-dev.kinepolis.fr
shop.kinepolis.be
shop.kinepolis.be
shop-dev.kinepolis.be
kinepolis.megatix.be
kinepolis.biz
kinepolis.megatix.be
kinepolis.fr
tickets.kinepolis.be
kinepolis.biz
kinepolis.megatix.be
kinepolis.fr
www.kinepolis.fr
shop.kinepolis.be
kinepolis.fr
tickets.kinepolis.be
kinepolis.biz
*.kinepolis.fr
*.kinepolis.fr
kinepolis.biz
kinepolis.fr
shop-dev.kinepolis.be
shop-dev.kinepolis.be
kinepolis.biz
www.kinepolis.fr
kinepolis.megatix.be
kinepolis.megatix.be
shop-dev.kinepolis.fr
kinepolis.megatix.be
shop-dev.kinepolis.be
*.kinepolis.fr
shop-dev.kinepolis.be
shop-dev.kinepolis.fr
shop-dev.kinepolis.be
kinepolis.biz
kinepolis.megatix.be
kinepolis.fr
kinepolis.megatix.be
shop.kinepolis.be
kinepolis.fr
tickets.kinepolis.be
shop-dev.kinepolis.fr
kinepolis.biz
shop-dev.kinepolis.fr
kinepolis.fr
kinepolis.biz
kinepolis.biz
shop.kinepolis.be
shop-dev.kinepolis.fr
shop-dev.kinepolis.fr
shop-dev.kinepolis.be
shop-dev.kinepolis.be
kinepolis.biz
kinepolis.biz
kinepolis.lu
kinepolis.biz
shop-dev.kinepolis.fr
kinepolis.biz
shop-dev.kinepolis.be
shop-dev.kinepolis.fr
kinepolis.biz
kinepolis.biz
kinepolis.fr

Certificate

The complete raw certificate details for shop-dev.kinepolis.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGdTCCBV2gAwIBAgISAxrVFqpUm2BZIZPp8FujXT6PMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjAzMjkwNzIxMjBaFw0yMjA2MjcwNzIxMTlaMCAxHjAcBgNVBAMT
FXNob3AtZGV2LmtpbmVwb2xpcy5mcjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC
AgoCggIBAKZc/V5R7SNe/7MEqxVvcrVQDInlF0A67aAPYldVMsSKSUaZiiT6qrIH
AvQ/3VKj+HsL1wJ2QvwpCRyiPFwXeKcpCnpQZCEBzACLDNrx0XLD4iY2fFl4bhEX
PiKofT5pNRx/pION+hasNL6mdgClQ6vlSdoaRx1vZ/WmfY16ZSa6RKItMu80RHdT
90vw83Byv5WMmh6FF1+RxE/pVUw6tzTK42P7lYWIBFKOEQ4Q9/kcUbmoaRTEKhSX
uefJrKr9iHwWUJUZYyVFuGShI55immOItN4+JpTQWrMSMecjeTVZaN667qVs+Hzq
kU2XLY49IqXfxH+Dp/LoOFiR9h6Pn2vj8b2CygKgpyNfTe/vx90pVm0393ETQkdo
g5pNO7rf1OTepyrmWVv77rXD3vGljO7mvczJNJs0K62rGB1N2bCJmAdTcmrepmzV
q/tZ790soaNeHEl3u+wCNNlS0VvH7fDfmGIrGZigUNZY9paMBm7zR3yd4sJzgz1l
+qtOV32hD68BMe+/vuzXzxHl04AAkgnhiVEbjekPNuvzPgw28qKcQ7YXoDlal8gI
HPZB7mSS49QrMPbrvMLbSz24AUiNt8FpxMyy+V+3FXgSffOreF9kFSW5LyklPlWS
OdzIR4uKfl1T+LDQazqdpz/vVppFZLB6uwoiDtNoIzh3aMMJ0bhFAgMBAAGjggKV
MIICkTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFOxCoP+HOz1JVY2MGAUs3sV66wtU
MB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkw
RzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAC
hhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMGUGA1UdEQReMFyCFXNob3AtZGV2Lmtp
bmVwb2xpcy5iZYIVc2hvcC1kZXYua2luZXBvbGlzLmVzghVzaG9wLWRldi5raW5l
cG9saXMuZnKCFXNob3AtZGV2LmtpbmVwb2xpcy5sdTBMBgNVHSAERTBDMAgGBmeB
DAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxl
dHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AEHIyrHfIkZK
EMahOglCh15OMYsbA+vrS8do8JBilgb2AAABf9TD3vQAAAQDAEcwRQIhAPmNdiFv
oEit5Nz6WnMkX+DviIpH5AP6Gozac+ENFx6gAiBqpZOfvH8HrT/uWI+C8NFanqd3
ihKgqhFYc/1fUir8YQB2ACl5vvCeOTkh8FZzn2Old+W+V32cYAr4+U1dJlwlXceE
AAABf9TD3twAAAQDAEcwRQIhAIviN8mFZa6L+LJtzdtugUUCR/3ZrqSUWRmzqLbU
PrSFAiBgSri7fZUa14VaMnCCGDz2EpMPtZx/ritJP7JkOI+V5TANBgkqhkiG9w0B
AQsFAAOCAQEAto17Ohor09T4db4JfFhL4Pm38iwH/wyl2VvWgocGao9O2fjhMAaT
Sof+8oTv9ROrNvvKw5pc/5V0APdGG0YtqwTfGhDvRun067bXWcb+olANB8pUhvbH
nj6F82F8rZj4AavZmY3n5otILBlIjBu/RO1vh7RrTpqPRfisnVqwAEZ9D4VWqjYJ
U0QHqgVszwQDV/kW9LEYVo4G6pG713lmQSL91izv2vt1pJdu2eHitfA+tMB3l+5G
19Y0G+pnH8E8TXj4Vob/hqaju6UxUzlL+dHRsP57zfTB2gsOc5F2O3A//tBWvefB
fpJ3XM+77Nf3vy6332RC5JT2ueLCyp6nmQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270467442583571099763348962638626801139343
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-29 07:21:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-27 07:21:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shop-dev.kinepolis.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 678702809672039838277719149566762444943884958381130344335970000573226331576323687681072199059295873906152595026901148313434071039095712335284921563921751030994814412731277653774826644607109858766778333015580001922619585118266164679018427920382917433993488480503587586005491043911105238196847629644629959750458686165318700878102634862333460013055892138122207852996554147588007201029935533990137358365464407395354101716561183773136699582507093682466513425995931827164933288905645975403508158697599009597992228239035196656247245107094790097697078913677833967228235673168125466711592620921909339743037726266896013546501972936007978133605095745534060452712791547984181696772942623808668406499759570224242330779567737776918148148799082366742043620125050406277204721986792297543472778298987817528706163792303390104090735187595448908115241270541995900025158010938755156877194970759925806870233666970332389907885348680314859962133582380341313265971041351792795835236851914593984887654941206418459237418149166578176783621050909196039697264606295207276935923974523505115174490793790064946676611081585250410274751244344926394195443823933632653289886508538048124647691182921624117611876640528586021395721732921288045614646926055458536725075310661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ec42a0ff873b3d49558d8c18052cdec57aeb0b54
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-dev.kinepolis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-dev.kinepolis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-dev.kinepolis.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-dev.kinepolis.lu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017fd4c3def40000040300473045022100f98d76216fa048ade4dcfa5a73245fe0ef888a47e403fa1a8cda73e10d171ea002206aa5939fbc7f07ad3fee588f82f0d15a9ea7778a12a0aa115873fd5f522afc610076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017fd4c3dedc00000403004730450221008be237c98565ae8bf8b26dcddb6e81450247fdd9aea4945919b3a8b6d43eb4850220604ab8bb7d951ad7855a327082183cf612930fb59c7fae2b493fb264388f95e5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b68d7b3a1a2bd3d4f875be097c584be0f9b7f22c07ff0ca5d95bd68287066a8f4ed9f8e13006934a87fef284eff513ab36fbcac39a5cff957400f7461b462dab04df1a10ef46e9f4ebb6d759c6fea2500d07ca5486f6c79e3e85f3617cad98f801abd9998de7e68b482c19488c1bbf44ed6f87b46b4e9a8f45f8ac9d5ab000467d0f8556aa3609534407aa056ccf040357f916f4b118568e06ea91bbd779664122fdd62cefdafb75a4976ed9e1e2b5f03eb4c07797ee46d7d6341bea671fc13c4d78f85686ff86a6a3bba53153394bf9d1d1b0fe7bcdf4c1da0b0e7391763b703ffed056bde7c17e92775ccfbbecd7f7bf2eb7df6442e494f6b9e2c2ca9ea799