vietnam.ahk.de

Issued by R3

About this certificate

This digital certificate with serial number 03:2e:75:d0:63:bc:ac:d8:cb:c4:75:dd:df:f8:31:e4:a4:c5 was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vietnam.ahk.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2e:75:d0:63:bc:ac:d8:cb:c4:75:dd:df:f8:31:e4:a4:c5
Serial Number (int): 277146448369804258486591236820549564146885
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e8:cb:a9:3e:40:49:b7:0e:52:46:45:3d:16:6f:60:c9:c6:ba:72:d9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3a:6f:e4:44:2a:7a:84:06:38:07:fe:eb:90:85:ef:56:f0:e2:43:02
Fingerprint (sha256): 09:06:59:1e:4d:64:a5:69:a5:2e:da:32:67:28:8f:d6:59:7b:ae:b0:c4:af:01:64:03:e9:a1:8d:3c:b4:ae:df

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate vietnam.ahk.de

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vietnam.ahk.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hanoi.ahk.de
vanbangviettaiduc.com.vn
vietnam.ahk.de
www.hanoi.ahk.de
www.vanbangviettaiduc.com.vn
www.vietnam.ahk.de

Other certificates including the domain name ahk.de

(limited to 100 certificates)
kroatien.ahk.de
www.spanien.ahk.de
serbien.ahk.de
bosnien.ahk.de
angola.ahk.de
malaysia.ahk.de
customer-support.zoho.com.cn
tunesien.ahk.de
georgien.ahk.de
israel.ahk.de
bolivien.ahk.de
russland.ahk.de
baltikum.ahk.de
myanmar.ahk.de
island.ahk.de
events.china.ahk.de
israel.ahk.de
ukraine.ahk.de
people.cs.zohohost.com.cn
hd.welldo.online
belarus.ahk.de
paraguay.ahk.de
malaysia.ahk.de
kolumbien.ahk.de
neuseeland.ahk.de
eawu.ahk.de
malaysia.ahk.de
malaysia.ahk.de
honduras.ahk.de
debelux.ahk.de
usa.atlanta.ahk.de
israel.ahk.de
niederlande.ahk.de
ahkspanien.es
russland.ahk.de
indonesien.ahk.de
philippinen.ahk.de
malaysia.ahk.de
japan.ahk.de
uruguay.ahk.de
ahkzakk.com
malaysia.ahk.de
125jahre.ahk.de
japan.ahk.de
uruguay.ahk.de
vae.ahk.de
bej.ahk.de
bej.ahk.de
*.china.ahk.de
www.dsihk.sk
island.ahk.de
vietnam.ahk.de
algerien.ahk.de
kolumbien.ahk.de
nebesar.cz
iran.ahk.de
saudiarabien.ahk.de
slowenien.ahk.de
www.ahk-baku.de
gaccwest.com
portugal.ahk.de
myanmar.ahk.de
indien.ahk.de
island.ahk.de
algerien.ahk.de
srilanka.ahk.de
dfhk.fi
panama.ahk.de
125.debelux.org
dnhk.org
eurocollege.ahk.de
paraguay.ahk.de
dnhk.org
eawu.ahk.de
indonesien.ahk.de
dnhk.org
support.china.ahk.de
gaccny.com
ghana.ahk.de
vietnam.ahk.de
japan.ahk.de
indien.ahk.de
www.german-irish.ie
kroatien.ahk.de
russland.ahk.de
bosnien.ahk.de
paraguay.ahk.de
suedafrika.ahk.de
eawu.ahk.de
eawu.ahk.de
armenien.ahk.de
taiwan.ahk.de
honduras.ahk.de
myanmar.ahk.de
europakonferenz.ahk.de
japan.ahk.de
honduras.ahk.de
elsalvador.ahk.de
kolumbien.ahk.de
slowenien.ahk.de

Certificate

The complete raw certificate details for vietnam.ahk.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGjzCCBXegAwIBAgISAy510GO8rNjLxHXd3/gx5KTFMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjAzMDIxNDU5NDZaFw0yMjA1MzExNDU5NDVaMBkxFzAVBgNVBAMT
DnZpZXRuYW0uYWhrLmRlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
5lx+ea8gStosSog+TqMxANhAhlFnZcTyJAwXEcQsiBx+uzc2PAGYNIWOJe/nj5oU
fQKwzxK5iFk0XyJousc9xfs2DISxxc6psocL0JrQZGF9fVsNeD2ckFx1JfCxj3ip
AxPrawnUFYREgI+js4vOZlns3aI/BJ3gbcyhyHO4+/SNR4Z5VvDaMXd755w8Nnao
b0y2FkShj3fzk8mKnoHin+sa7S+u4w4tglk8jLYsdERKUMkziznwMfwzJXxgcryu
3w4LP8XUUxMbytY+efCU+PeHGQg3ted30CFIFcipSFUhu7OHLvqlyb9mv0BGL5V+
o1clP+2TTq1Q7djtfJuBuBLzb4kUj7I5O3vKsFVysWw3canwWkGL4a6elfECxijp
m4YG3QCV4otlxGlZsFJD9XEYuKdtrrGLjxCTyYrzvh1mOF5IFuGET7s1UpMhaayQ
W8XOTXsfoZQRvHb/8jlHBVOvcauKFi2QKLQ0QtsnZV1Qj2XDGCXT6woGIF4yV0Vq
2ZE1zvYt+7zvNtgqAoeSxYCDnUhVzDTawmJEUm1lP4q7ep6RPE7gyjYFA/03dUNM
ew/NBcYI8z+spsWwvUCDFUGnRZ1UyVW196mVsUrW4WYNSnkKuWgNUFQh3fcHVIbC
lWeozhwysULxVxCTlGHPi4JH8Fw6ble//2EFErpbfBkCAwEAAaOCArYwggKyMA4G
A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYD
VR0TAQH/BAIwADAdBgNVHQ4EFgQU6MupPkBJtw5SRkU9Fm9gyca6ctkwHwYDVR0j
BBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsG
AQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6
Ly9yMy5pLmxlbmNyLm9yZy8wgYUGA1UdEQR+MHyCDGhhbm9pLmFoay5kZYIYdmFu
YmFuZ3ZpZXR0YWlkdWMuY29tLnZugg52aWV0bmFtLmFoay5kZYIQd3d3Lmhhbm9p
LmFoay5kZYIcd3d3LnZhbmJhbmd2aWV0dGFpZHVjLmNvbS52boISd3d3LnZpZXRu
YW0uYWhrLmRlMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgw
JgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYB
BAHWeQIEAgSB9QSB8gDwAHYAQcjKsd8iRkoQxqE6CUKHXk4xixsD6+tLx2jwkGKW
BvYAAAF/S1vdpAAABAMARzBFAiA6aIWtRmegwuegz4TevUOYxwJk9/01zDp0kzmf
C5rXkwIhAM+7gfj79420U4il5Rzu51+Q2GTFnppfBsSE+bBPtCrHAHYARqVV63X6
kSAwtaKJafTzfREsQXS+/Um4havy/HD+bUcAAAF/S1veQgAABAMARzBFAiBLYIRs
ZzB1ITCDPgRy4ewO3kkFh1V/eL0I0A00jGk0LAIhAIC38ngO46GMvdn5Oe9DIQsZ
pBLdgdRi2BwBd1pF/qeNMA0GCSqGSIb3DQEBCwUAA4IBAQCzZyS3MPUGm/411G5c
rzSJKPpxg0+u2IzLA8SRdwh51yRWvEbtgLB3JQ/wSeIFlR6l0V48N4wJZfv0iIjF
x/puv6KZ27BGdAwxBRuEvpkSnyvhN8Bv1DiLoNcyuon5DNOZAPvTMG7Nqy1RIMqp
A1NLHpl013k8PGOGqhS5NPXoMvCKQcC3T2ZuWrQlfLXoOULa7YOxIt7LCVzCHZfG
lT7tCNC3Q4iSWG7+6oCLu9EHDlTNKD98xZULseckbKQurl2NeEv0S1uJRAWMIE0W
mhZLvBfJI7YCNivsx5lGTK4jovxVheNO9JwCDsbLrDvM7xW0cq5YMWQFB/qZK7Uv
iS03
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277146448369804258486591236820549564146885
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-02 14:59:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-31 14:59:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vietnam.ahk.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 939792130874938110940651995438368230621856242067138316655052284783323959803697950239232077242694124637943797887855823006674858760555895012955217334734369472704508903930466556563781979310337789979794838172118391268465988111926933611396518225506341071584961488883371561819105471017683292405733921617930351054776812377262525376894923773322690914178611611425328607591648480858045272630723424207200208538117345456036903669109444334711684687013840267473346807333555700884537510840822331758426678837086741910727630161146814813132922660013844715582171977278140244736259307715746645298455106012493363226667477254667009376400189807461940301224446269047742219879062828034747730255134331606523900770414641781847927359597825710807136448675629426098126948125630378214881950354444861422494072282642692486102777734612526473314533650648997628265649911548678266638668227992870683045368712894275445124734506903699787029002766941667724991430409235535863570528212671024363851950694213123029595941191636434087846911429454613144959138361983213436197028215615967653470867232018680949296344690797015367787963559391231358164415348311695092094432843387131510460622732333270360294503506080681946545334556388761754918955924541202765903604653148864086713317424153
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8cba93e4049b70e5246453d166f60c9c6ba72d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hanoi.ahk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanbangviettaiduc.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vietnam.ahk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hanoi.ahk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vanbangviettaiduc.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vietnam.ahk.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017f4b5bdda4000004030047304502203a6885ad4667a0c2e7a0cf84debd4398c70264f7fd35cc3a7493399f0b9ad793022100cfbb81f8fbf78db45388a5e51ceee75f90d864c59e9a5f06c484f9b04fb42ac700760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017f4b5bde42000004030047304502204b60846c6730752130833e0472e1ec0ede490587557f78bd08d00d348c69342c02210080b7f2780ee3a18cbdd9f939ef43210b19a412dd81d462d81c01775a45fea78d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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