gcov-kazan.ru

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ff:40:48:96:a0:e2:8a:0d:fb:3a:80:c4:45:01:65:6b:1c was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gcov-kazan.ru

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ff:40:48:96:a0:e2:8a:0d:fb:3a:80:c4:45:01:65:6b:1c
Serial Number (int): 348194308852332154306528022286563520375580
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4f:d6:f9:3f:d6:0f:16:5b:31:7e:42:93:6f:d0:92:a9:aa:1d:98:30
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 17:6f:7a:e1:24:b6:e7:aa:c2:6d:43:49:a4:6f:89:44:b5:67:1e:9f
Fingerprint (sha256): 08:9d:d3:3a:50:1a:19:03:4d:d9:0d:6d:46:4a:8b:09:80:fb:5e:0b:a6:29:b2:56:35:4d:de:81:7c:42:e8:dc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gcov-kazan.ru

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gcov-kazan.ru

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.gcov-kazan.ru
gcov-kazan.ru
gcov-kazan.sengrad.ru
mail.gcov-kazan.ru
webdisk.gcov-kazan.ru
webmail.gcov-kazan.ru
www.gcov-kazan.ru
www.gcov-kazan.sengrad.ru

Other certificates including the domain name gcov-kazan.ru

(limited to 100 certificates)
gcov-kazan.ru
gcov-kazan.ru
gcov-kazan.ru
sengrad.ru
gcov-kazan.ru
gcov-kazan.ru
gcov-kazan.ru
gcov-kazan.ru
gcov-kazan.ru
gcov-kazan.ru
gcov-kazan.ru
gcov-kazan.ru
old.gcov-kazan.ru
gcov-kazan.ru
gcov-kazan.ru
gcov-kazan.ru
gcov-kazan.ru
gcov-kazan.ru
gcov-kazan.ru
gcov-kazan.ru

Certificate

The complete raw certificate details for gcov-kazan.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGpjCCBY6gAwIBAgISA/9ASJag4ooN+zqAxEUBZWscMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA1MTMyMDI4MTdaFw0x
ODA4MTEyMDI4MTdaMBgxFjAUBgNVBAMTDWdjb3Yta2F6YW4ucnUwggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRmZPSCMD9yDyDcRHd7Kpr0cvFakJGW6lS
SmETdZa0i+ePy6O/RAB1FbMxVoBVB6+Y+jcmYznYHUL++GtOmpFNLhUMBdkBEN50
csIehnmn4is2jqUKkZwvZrui6K3xcL+OpiOXF0pNrALmocEVbE8SxmvsK7MZ7dF6
oITMOUWDyp6vqR9fO6b3qUFvbF6jt0MJA1EfJe/dfsIHmA4UCabUc/13QrZJ0qQr
bZYix6MvhVJul5YxvxQGicAOghpd75XwphWf71yoeWNbJbMGlTLtcKK1wbw08rWh
r6RbzyecGiDjQ5j17KkqymSJnB/K0O7jDufOebQXWE9D/orBjElxAgMBAAGjggO2
MIIDsjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFE/W+T/WDxZbMX5Ck2/QkqmqHZgw
MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMw
YTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9y
ZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9y
Zy8wgbcGA1UdEQSBrzCBrIIUY3BhbmVsLmdjb3Yta2F6YW4ucnWCDWdjb3Yta2F6
YW4ucnWCFWdjb3Yta2F6YW4uc2VuZ3JhZC5ydYISbWFpbC5nY292LWthemFuLnJ1
ghV3ZWJkaXNrLmdjb3Yta2F6YW4ucnWCFXdlYm1haWwuZ2Nvdi1rYXphbi5ydYIR
d3d3Lmdjb3Yta2F6YW4ucnWCGXd3dy5nY292LWthemFuLnNlbmdyYWQucnUwgf4G
A1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUF
BwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4M
gZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJl
bHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENl
cnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9y
Zy9yZXBvc2l0b3J5LzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3ANt0r+7LKeyx
/so+cW0s5bmquzb3hHGDx12dTze2H79kAAABY1tneLIAAAQDAEgwRgIhALbJpP7W
HIatrwM9cD8ShoB/9EIfxkb/46aHTHfFKX+QAiEAiaBKV3bRnLfhTN1Yexxiuj+e
Ywr9Q7l7zMCSb8tRJf8AdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0
eAAAAWNbZ3jlAAAEAwBHMEUCIDLYrn8N5oZOokj/ZkUnu/P1c8kki1RF8APCYYE3
x0+3AiEA4zlisQuBERr8W6i1jq9uzcDsSVn/osSSbmTNFTbu7CMwDQYJKoZIhvcN
AQELBQADggEBAC3xXYdnjGDLXMcV4m/ss6WuoUFh2wqzipFFv4MVLHn+wtRwlsIk
1kkWXkoYoM1e9Ai2glbQPAdCENUZ8eqrQt3D18Tp1re390SoRXcuVMddbok0dUEP
nLHDxZMBCc3x/ql/nFQI+t6HSef6gwfNmgalbDSYxjpgjEzeXi6nGB3xLtoj98aV
SgePYFHZS7u8C/ylNGHNSs5CCqsOSxeRj7Jd0dvCzJzhMwEgxPa6qPbk5h4txvFw
53QJu6OQDRSH535/AdYQAE75qMgdYEWXocM9eoDYmL6wpuiziYiTpNKi9WzFmIlx
Y9d6TOKxvZVryc2+Bf8bkFNxs+RTUcfwuKA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZmT0gjA/cg8g3ER3eyq
a9HLxWpCRlupUkphE3WWtIvnj8ujv0QAdRWzMVaAVQevmPo3JmM52B1C/vhrTpqR
TS4VDAXZARDedHLCHoZ5p+IrNo6lCpGcL2a7ouit8XC/jqYjlxdKTawC5qHBFWxP
EsZr7CuzGe3ReqCEzDlFg8qer6kfXzum96lBb2xeo7dDCQNRHyXv3X7CB5gOFAmm
1HP9d0K2SdKkK22WIsejL4VSbpeWMb8UBonADoIaXe+V8KYVn+9cqHljWyWzBpUy
7XCitcG8NPK1oa+kW88nnBog40OY9eypKspkiZwfytDu4w7nznm0F1hPQ/6KwYxJ
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 348194308852332154306528022286563520375580
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-13 20:28:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-11 20:28:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gcov-kazan.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26459537588056737718376562105006126529239253673921628251618609127450615603222098338788911400968627493590021555173673264377969691140989877203113648406879231182922219664464260071156053670159982482477967466540240548977067530667901246587194870665271549597443510360851165735529401393972004512181004460448152836705884734487176680050972456215116934411748840568931647995691262602875432186210303301192477081885341648290431235638493470346290984452332082904869485108665139714090193149325366416751681305546921757344005152944757194474600288058864261465591431392674550799571618566377284203273346799254897861500322540010543835269489
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4fd6f93fd60f165b317e42936fd092a9aa1d9830
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (175 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.gcov-kazan.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcov-kazan.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcov-kazan.sengrad.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.gcov-kazan.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.gcov-kazan.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.gcov-kazan.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gcov-kazan.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gcov-kazan.sengrad.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001635b6778b20000040300483046022100b6c9a4fed61c86adaf033d703f1286807ff4421fc646ffe3a6874c77c5297f9002210089a04a5776d19cb7e14cdd587b1c62ba3f9e630afd43b97bccc0926fcb5125ff007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001635b6778e50000040300473045022032d8ae7f0de6864ea248ff664527bbf3f573c9248b5445f003c2618137c74fb7022100e33962b10b81111afc5ba8b58eaf6ecdc0ec4959ffa2c4926e64cd1536eeec23
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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