engo.isp-vhost04.domservice.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5b:29:53:5b:9a:0b:86:89:69:fe:45:12:73:eb:23:09:ad was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=engo.isp-vhost04.domservice.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5b:29:53:5b:9a:0b:86:89:69:fe:45:12:73:eb:23:09:ad
Serial Number (int): 292357484351456557996107029981055731042733
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: da:e5:05:b9:bc:57:83:4b:e4:31:7d:52:04:b4:d9:8a:e2:f1:6b:15
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 14:c7:79:a5:02:fd:33:92:85:e5:6c:72:f1:3c:df:6d:57:b4:f4:c6
Fingerprint (sha256): 0a:7b:b9:8c:7d:12:ff:38:5d:0c:fa:b2:d1:67:2e:26:70:45:8d:25:b5:66:09:67:70:37:86:a9:7b:43:ac:7f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate engo.isp-vhost04.domservice.de

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for engo.isp-vhost04.domservice.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

energiegenossenschaft-ostthueringen.de
energiegenossenschaftostthueringen.de
eng-o.de
engo.isp-vhost04.domservice.de
www.energiegenossenschaft-ostthueringen.de
www.energiegenossenschaftostthueringen.de
www.eng-o.de
www.engo.isp-vhost04.domservice.de
www.xn--energiegenossenschaft-ostthringen-iqd.de
www.xn--energiegenossenschaftostthringen-xmd.de
xn--energiegenossenschaft-ostthringen-iqd.de
xn--energiegenossenschaftostthringen-xmd.de

Other certificates including the domain name domservice.de

(limited to 100 certificates)
reichelttv.isp-vhost04.domservice.de
reichelttv.isp-vhost04.domservice.de
handballpost.de
hypos-eastgermany.isp-vhost04.domservice.de
cd-lab.isp-vhost04.domservice.de
schwihag.isp-vhost04.domservice.de
gerling.isp-vhost04.domservice.de
itns.de
aka-verlag-neu.isp-vhost04.domservice.de
bleilaus-verlag.de
job199.isp-vhost04.domservice.de
iq-mitteldeutschland3.isp-vhost04.domservice.de
piwik-mittelde.isp-vhost04.domservice.de
gfn.isp-vhost04.domservice.de
uap.isp-vhost04.domservice.de
gfn.isp-vhost04.domservice.de
hypos-piwik.isp-vhost04.domservice.de
cut-as.isp-vhost04.domservice.de
wendt.isp-vhost04.domservice.de
tzoleipzig.de
samija.isp-vhost04.domservice.de
schwihag.isp-vhost04.domservice.de
hvs-handball.de
uap.isp-vhost04.domservice.de
laendernotar.isp-vhost04.domservice.de
hommage-leipzig.de
nobitz.isp-vhost04.domservice.de
peterbruns.de
toro-pflegegruppe.isp-vhost04.domservice.de
itns.de
hypos-eastgermany.isp-vhost04.domservice.de
concerto-magazin.de
vs-mtl.isp-vhost04.domservice.de
engo.isp-vhost04.domservice.de
radierung.isp-vhost04.domservice.de
hypos-eastgermany.isp-vhost04.domservice.de
job199.isp-vhost04.domservice.de
cut-as.isp-vhost04.domservice.de
vs-aph-grimma.isp-vhost04.domservice.de
blumenhaus-brehmer.de
gerling.isp-vhost04.domservice.de
innovationsregion-mitteldeutschland.isp-vhost04.domservice.de
itns.de
gym-borsdorf.isp-vhost04.domservice.de
mitteldeutschland.isp-vhost04.domservice.de
piwik-mittelde.isp-vhost04.domservice.de
peterbruns.de
kanzlei-kratz.isp-vhost04.domservice.de
vs-aph-schkeuditz.isp-vhost04.domservice.de
steinstrasse.isp-vhost04.domservice.de
toro-pflegegruppe.isp-vhost04.domservice.de
boehme.isp-vhost04.domservice.de
piwik-mittelde.isp-vhost04.domservice.de
limes.isp-vhost04.domservice.de
aka-verlag-neu.isp-vhost04.domservice.de
zappendorfer.isp-vhost04.domservice.de
tzoleipzig.de
gfn.isp-vhost04.domservice.de
boehme.isp-vhost04.domservice.de
mitteldeutschland.isp-vhost04.domservice.de
lehmann.isp-vhost04.domservice.de
handballpost.de
innovationsregion-mitteldeutschland.isp-vhost04.domservice.de
tzoleipzig.de
revierpionier.de
ytong-massivhaus.de
innovationsregion-mitteldeutschland.isp-vhost04.domservice.de
reichelttv.isp-vhost04.domservice.de
kunstglaserei.isp-vhost04.domservice.de
lbw.isp-vhost04.domservice.de
aka-verlag-neu.isp-vhost04.domservice.de
boehme.isp-vhost04.domservice.de
isp-vhost04.domservice.de
handballpost.de
nato-leipzig.isp-vhost04.domservice.de
blumenhaus-brehmer.de
itns.de
steinstrasse.isp-vhost04.domservice.de
kuecheaktiv.isp-vhost04.domservice.de
tzoleipzig.de
iq-mitteldeutschland3.isp-vhost04.domservice.de
iq-mitteldeutschland3.isp-vhost04.domservice.de
ecb.isp-vhost04.domservice.de
hvs-handball.de
engo.isp-vhost04.domservice.de
hypos-eastgermany.isp-vhost04.domservice.de
esgero.ch
hessler.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
blumenhaus-brehmer.de
cd-lab.isp-vhost04.domservice.de
cut-as.isp-vhost04.domservice.de
engo.isp-vhost04.domservice.de
lbw.isp-vhost04.domservice.de
hms-schubert.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
hommage-leipzig.de
engo.isp-vhost04.domservice.de
kuecheaktiv.isp-vhost04.domservice.de
gerling.isp-vhost04.domservice.de

Certificate

The complete raw certificate details for engo.isp-vhost04.domservice.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxurJ1grdlUAMVQjb85Er
R4UyvR8Boq/Q+zsurKqQ1vtWMC0mKHFqfSH1nOGtbKU64xYiTYVbpKm46UPrctwS
aBTtojXOAvk5i2m9Z83XrKV37qsGsWfCEFASjlkU3YRW0lCQZjUB6OfxSQvVOQ6n
3hlCcIGr/b3rMEW0TEEZB4L5CqW7sU3GBYgbiCXy0Fwd8JzTF/iOo1jaAjJcjevt
j6E0YvSc0GH3DtwxHdz+WNNsNjTSlN7cetJagIFrTjzXzNPJUnvAK7D+9nMDe58r
6zEL6GN4/F2b/G8JbIuU66yMlpI+ZKZVZ4YVQzKQ6S/okNJXRyObERxWE9bcIJdt
9pr4UKgm2BCzqyBbw2GuDdZf+I3294Qo7GNdu7yDaP+55fftofn+Ingz6mHpAAnk
QyEaPWGG5rJUWsPWTKoUZ5qhJsle5ZmKcc8gQIJ11gg3NDzgUikYfmwnnNlguh12
VE4KqVO2wpJcT29D0cD6CgprmpOl3i33ClQCYXekmG7GJLARvMuYTFktEooW7Gpc
YbDTP7pqvpiNpf702T4vfl4NDRVYLjrWSQmRq17S4GbU6BDbhAh5ypsl0hljEtdA
YdASSd0/x1TJCObAszFzLgpN8aL6oRFdJmIBMpxsWGNizBAS56UErPjInV1n4UHt
S0cER5OuPQAL70zMWBkZg5UCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292357484351456557996107029981055731042733
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-11 01:07:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-09 01:07:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'engo.isp-vhost04.domservice.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 811511139507783092955619064221123547710121181529350609091466220560587227415232291278383477323414218470709875573270573335968162659643301602432057239702442170425731624589530483168964101917062169535561014152381753969915236688577418402653797855919766215069622950578901864002566792918620860474748211123522796148787959987682747827267282225977699328548639543615418696065817235849573923218611434328146628488639198059361478836253758283091004940578545530819418004512937915380192478788728254839721711096996581001845253143745643550465004554367997128039936667949886859142408542674072655868106821983818586350358182278124122131093233920295925711994532148850474815455017711640237118163206464375013475019397049264343924453165472221126724709324233187567295641356465296683385061528667503792116352795992254337602704656492588416492044500410531281193225368766476788500509717002039348098670962459462886892454942627866081408896440119060390196748897788897798275348717674255493704546132730394645020172975987847327211958346652776642609535091246155451890145518387154511038809914355862458276601181387734938085270217912937117304303631706098580472415004668010400507458820456631088974928051923348502449468937821859014233044488913046848819726415024547498704225534869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dae505b9bc57834be4317d5204b4d98ae2f16b15
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (452 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energiegenossenschaft-ostthueringen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energiegenossenschaftostthueringen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eng-o.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engo.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.energiegenossenschaft-ostthueringen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.energiegenossenschaftostthueringen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eng-o.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.engo.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--energiegenossenschaft-ostthringen-iqd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--energiegenossenschaftostthringen-xmd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--energiegenossenschaft-ostthringen-iqd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--energiegenossenschaftostthringen-xmd.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170c758d17f0000040300473045022100d984b5c455092c8f891714221f124b9fe8d9ed5c70b38b5bfaa4a07d6f4d700e022069a71db8aad3fe1e380e7a6a2e6c6c324b172dc68e2460a00ba149cbf724143900750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170c758d1ac000004030046304402203efb05be3d2ae83344bd443605f3c1aa2d22945cc38987d573dfea79b96e1986022009551b5d09946c7de6b627ee0de754d12777dc79a3a89386bf06c96970919d11
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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