sporty.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 03:67:9a:bb:d7:a4:1e:d5:4e:03:e7:d0:81:de:b2:a9:bf:c0 was issued on by Let's Encrypt.

With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sporty.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:67:9a:bb:d7:a4:1e:d5:4e:03:e7:d0:81:de:b2:a9:bf:c0
Serial Number (int): 296591618032721850591152345235107892281280
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a4:bc:f2:3c:29:57:01:ec:df:7b:99:86:b4:1b:c0:43:c9:a3:21:fd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f4:63:ff:f5:56:ed:8d:79:05:36:01:08:bf:e9:b5:f8:bc:89:f2:a5
Fingerprint (sha256): 0b:8a:1b:75:11:09:e3:19:5c:b7:b9:03:7a:0b:3b:c7:d6:85:fe:19:d4:96:fc:a7:28:0f:f9:9e:2b:64:b6:6a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.co.nz

49

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aafl.co.nz
actc.org.nz
ahiparagamefishclub.co.nz
aucklandmarist.co.nz
blenheimgolfclub.co.nz
bluffhillbowls.co.nz
bullernetball.co.nz
bushmultisport.org.nz
hastings-central.school.nz
heet.net.nz
lucknow.school.nz
mandevillesports.co.nz
manurewaswimmingclub.co.nz
melrosetargetshooting.co.nz
morningtonbowlingclub.co.nz
mtwellingtonrugby.co.nz
mtwswim.co.nz
nelsoncarclub.co.nz
nelsonfarmersmarket.co.nz
nelsonfarmersmarket.org.nz
netballmanawatu.org.nz
nzpca.org
nztua.com
otahuhuroversrugbyleague.co.nz
pioneerbasketballclub.co.nz
prebbletonnetball.org.nz
puhoisports.org.nz
schoolground.com
scrfu.co.nz
shoreroversnetball.co.nz
southerntack.co.nz
sportsground.com
sporty.co.nz
stewartalexander.co.nz
stheliersbowlingclub.co.nz
tabletennis.org.nz
taierirugby.co.nz
tasportscycling.co.nz
terracechb.school.nz
touchnorthharbour.co.nz
trenthamrifleclub.co.nz
tuakauponyclub.co.nz
tutangiora.nz
ultrarunner.org.nz
volleyballbop.co.nz
wellingtonrnr.org.nz
wellsfordsquashclub.co.nz
woodendrugby.co.nz
wops.co.nz

Other certificates including the domain name sporty.co.nz

(limited to 100 certificates)

Certificate

The complete raw certificate details for sporty.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPNukUZQzm48GBytSYFn
gvWx0hLIJvrwRYd8EHV2I7R6B8sJJU/LHzUS9QlBm2LZ7rGhdhsTKHk5QXTSVU45
2MGhq7addAho/Ti/9DwCncQX1q/6ThHW7aEMO4itq+qUYKzPIed5fnz5Jzrxyee4
r9y9n15cmKttQWX1uTiqjfAqKlas75J8z1dn+q3xLBrbImcOiSunMvZLrt4mi9fN
rGbwS2xkXNBJfUY8sLOD8wOmAwg/hC2c87wvJ8Sy1/8Pt/E/aXoC89IBzQ1V+Cdv
9Lt3VYSxFZoihC5YrY90sJ2IcWjtbX83owd7sB7BTtLEbiHPSQJJPFtJNafJRwP5
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296591618032721850591152345235107892281280
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 01:09:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-13 01:09:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22337982419974877679832251371914259948931789604727154515018466162963908199474651499031118209045330405346421678056799469223763771232798581006415546984769784270886667176666920132155787383069318382942671311368419909502289375371873339681418510114155069085708874674138211075069222047201710583081245753096885617503056714187617185110573608972444351769306285518989022074685190414510767634949791085029885333918624938791819605303857389015482023321578584719719149099158057124501146887243687568406118486320459424819248457675471424720219665346848609658930527231803818928746986667023787071929693977401647666170492449004343460624721
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a4bcf23c295701ecdf7b9986b41bc043c9a321fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1061 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aafl.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahiparagamefishclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandmarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blenheimgolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluffhillbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bullernetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bushmultisport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastings-central.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heet.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucknow.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mandevillesports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manurewaswimmingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melrosetargetshooting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morningtonbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtwellingtonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtwswim.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsoncarclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballmanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzpca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nztua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otahuhuroversrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pioneerbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prebbletonnetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puhoisports.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoreroversnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southerntack.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stewartalexander.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stheliersbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabletennis.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taierirugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasportscycling.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terracechb.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchnorthharbour.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trenthamrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuakauponyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tutangiora.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultrarunner.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volleyballbop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonrnr.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellsfordsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodendrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wops.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e3fdef3360000040300473045022100fdc3320f4186ca36281eef3df992046e36a1585de6e384bea8f643d238f611f302204a6537b4d84bb86cfeb0848dc1b3397764898b32543cdd7c9f8ec0f1c5893755007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e3fdef3410000040300483046022100abe36f0a9c0f6a6017da886d116c1b3357f09ffbb9e69d103d85bf35bf9a0c01022100e0b24cc988d9b7fa5cb097e068bcc0028ad1b84a4348dcec428d7dbed3211752
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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