c3food.kffein.work

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:84:78:bc:39:f8:ac:38:4b:41:f1:2c:90:26:a9:cc:5d:4b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=c3food.kffein.work

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:84:78:bc:39:f8:ac:38:4b:41:f1:2c:90:26:a9:cc:5d:4b
Serial Number (int): 306414614915947442757991609931953953594699
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9c:a3:b0:0b:f0:e0:c5:12:ef:c1:d0:27:7d:a6:66:67:0a:80:38:b7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6a:3b:0c:c5:09:ac:2e:31:ee:b4:db:51:79:20:2d:10:fe:dd:2c:e1
Fingerprint (sha256): 0d:fe:34:f7:c5:9e:bb:27:c0:d9:ba:0f:9a:b5:8e:ea:82:b4:0d:ac:f2:cc:fc:3a:16:77:6c:3b:ec:61:35:2a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate c3food.kffein.work

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for c3food.kffein.work

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

c3food.kffein.work

Other certificates including the domain name kffein.work

(limited to 100 certificates)
en-echo-api.kffein.work
en-echo-api.kffein.work
en-echo-api.kffein.work
en-echo-api.kffein.work
epicedecru.kffein.work
saintejulie.kffein.work
epicedecru.dev.kffein.work
epicedecru.dev.kffein.work
uni-millenium.dev.kffein.work
orford.kffein.work
koddein-doc.dev.kffein.work
sni69589.cloudflaressl.com
blisly.dev.kffein.work
kffein-manager.kffein.work
dbox.kffein.work
varitron.kffein.work
blisly.dev.kffein.work
c3food.kffein.work
blisly.dev.kffein.work
bitesize.dev.kffein.work
blisly.dev.kffein.work
en-echo-api.kffein.work
epicedecru.dev.kffein.work
epicedecru.dev.kffein.work
blisly.dev.kffein.work
consigneco.dev.kffein.work
webview.dev.kffein.work
blisly.dev.kffein.work
epicedecru.kffein.work
bitesize.dev.kffein.work
webview.dev.kffein.work
jardinsgamelin.kffein.work
c3food.dev.kffein.work
blisly.dev.kffein.work
webview.dev.kffein.work
en-echo-api.kffein.work
epicedecru.dev.kffein.work
dev-marineauvennes.kffein.work
saintejulie.kffein.work
en-echo-api.kffein.work
webview.dev.kffein.work
dbox.kffein.work
epicedecru.dev.kffein.work
uni.dev.kffein.work
epicedecru.kffein.work
uni.dev.kffein.work
uni.dev.kffein.work
blisly.dev.kffein.work
dbox.kffein.work
bitesize.dev.kffein.work
stage-marineauvennes.kffein.work
en-echo-api.kffein.work
epicedecru.dev.kffein.work
blisly.dev.kffein.work
dbox.kffein.work
guru.kffein.work
blisly.dev.kffein.work
bombardier-internship.dev.kffein.work
qds.kffein.work
saintejulie.kffein.work
epicedecru.dev.kffein.work
saintejulie.kffein.work
jardinsgamelin.kffein.work
bitesize.dev.kffein.work
webview.dev.kffein.work
en-echo-api.kffein.work
villanova.dev.kffein.work
uni.dev.kffein.work
bombardier-internship.dev.kffein.work
epicedecru.dev.kffein.work
dbox.kffein.work
webview.dev.kffein.work
refer.kumon.kffein.work
epicesdecru.kffein.work
en-echo-api.kffein.work
dev-marineauvennes.kffein.work
epicedecru.kffein.work
saintejulie.kffein.work
qds.kffein.work
dbox.kffein.work
spicetrekkers.kffein.work
consigneco.dev.kffein.work
spicetrekkers.dev.kffein.work
uni.dev.kffein.work
epicedecru.dev.kffein.work
c3food.kffein.work
villanova.dev.kffein.work
blisly.dev.kffein.work
qds.kffein.work
epicedecru.dev.kffein.work
blisly.dev.kffein.work
en-echo-api.kffein.work
acq.dev.kffein.work
refer.kumon.kffein.work
dev-marineauvennes.kffein.work
marineauvennes.kffein.work
epicedecru.dev.kffein.work
epicedecru.dev.kffein.work
saintejulie.kffein.work
blisly.dev.kffein.work

Certificate

The complete raw certificate details for c3food.kffein.work in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgISA4R4vDn4rDhLQfEskCapzF1LMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTcwMTQxMDhaFw0y
MDAzMTYwMTQxMDhaMB0xGzAZBgNVBAMTEmMzZm9vZC5rZmZlaW4ud29yazCCAiIw
DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKnn61KsYe0Rw4lYrFx5QBDgTkd+
tPc9rFuSB+uaKw7o5QlTR4g/4eZBnJPXvaLi1EwMrBFa4AdzegHYNwkCLnBYdUOR
sZ2s9beo1HdZjLNTHYh0MT9Y/iepI/M1W4CVbpjeCAZ5VC5FuikcWyjvJHI6CFiV
bp4QSB2GFkDBudMKj4jUKHZy/l1xaUUS+z93xU5lU2Vc2h+O3DR8aKPmDXjtGabn
s/UbmrbSRQfa3TvQnluocsEW3CaWp0cnCZnUta1cGbmKSRHUMK2N7Abyo8Plhuwy
HTreRWPlMwra0GHEzlkVCM9M5bpKo/XQLlTTO+45IKTzjUx2UHcsY1gma48sbYsH
aoIS/aDZFt7xgvHgAw83pcB2vzz+02zODo8Kp04KYQ+gLqBHUPFdAApXyso/llOk
o3WyVsKa1sHpsRUm1+Ijy4Ke2DuVdnRTb+3GJDEDVdBvb5F0Nvg5+aS58IISeKWM
yqSOhhkKPIesoyTqEC/fLTiP8IWT/HIZN1c7s/pwzfOyz90qu+7yEb9pSQuwfkDr
DEs+YQtTHdQdNP8HPHn3yvlegwIeK+5TKN7CSX+CW6+0K3Z6bNIa8lacAzwdKyVX
AabX57Yk5Ho8EGKihko3Rek2Qzs0GpWzh7mJihe57q+qp08g7ApB6B1O0qc0Z/rJ
dv1bTj1CSs7kXBx5AgMBAAGjggJnMIICYzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FJyjsAvw4MUS78HQJ32mZmcKgDi3MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF
Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au
aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu
aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHQYDVR0RBBYwFIISYzNmb29kLmtmZmVp
bi53b3JrMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI
KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHW
eQIEAgSB9QSB8gDwAHUA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMA
AAFvEbsMyQAABAMARjBEAiAbF1UOZfpRKqIp66TvibBmofR3eWuinC2/5PZG8gc7
dwIgJO0Iz29sPqzstdz1WVGp9j1O8zDR0eieT0kxOr8EN70AdwAHt1wb5X1o//Gw
xh0jFce65ld8V5S3au68YToaadOiHAAAAW8Ruwz0AAAEAwBIMEYCIQCstagC+vB0
LxDx0ODndZT3vZaL5L9Ehha3vLPYfyMLowIhAIjxkIFtth9oyYcTJGTADhGmYzr4
o5DWHICc/efwso3sMA0GCSqGSIb3DQEBCwUAA4IBAQCb8nJAuhHS/sKoHZcOZwr5
OwR+kYQj98tX2LODy12CnQHeVNADlHARfcEsieUTdTtyaIvijttDz0ryBz3oGUMK
yKigo1H3sGecq35oAOnA4OZZ8QQCVHkGF6P1zRwNwGpQnxlx0893HUfCgz7jDkmM
p0OEifQ8W18ZY0DpvsXOlZ6AKN6ZgeRpVE64vckTOY4m9dc4JbuMuW42jgMfstWh
5WGbC6wSod7kNJZpzOgSc+kPmXh0Z77FR4fKlu/oQ9m6RbeTj3KVQwgmFxk5SOpv
gBEaLKD3oqhH+JWUtKYF926ubIuGFjY37v2oUT+JPehz3bxqYsZopwlwgoviK9fn
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306414614915947442757991609931953953594699
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-17 01:41:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-16 01:41:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'c3food.kffein.work'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 693155737776381370109164966607153797950764707803063176618319097962553898370104767450222341763539715089444390214561125393034369088363921000900763646033334881319342240347405508372606728563672743131555417911388557081111243027775800877505481154866590207296372692664272542486373966244411420193940104874212598171579080486538497672986487890977240653997308583392804349231183264026563918385739505546604329784974991044831902985963848619147340243485195426720091861008748895580976436733362022539563997681343347192726579141614930041008882073284668407200891237497694048288250036571062807272742664897210179164667411358130097506016028777466833988828643663047621262237051697833079304875872505697875020483609529100238350266517144479685459676878257601720850132903657789096870524785401446387844740652985458973197991273694901876748729010055001686285815782533287837583878968556061859806067733064678377085958882672808288818682603885980430213296098306013943016268083994200804967525517358404063827518540040412335663257820206033084455067507712701839691881678802918605436827761274858204884296600736286374658032151732636029445228567370856685919451749815209201626913861240367187243268549965321880809626872079335681488718285724426827695293059166776699696141048953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9ca3b00bf0e0c512efc1d0277da666670a8038b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c3food.kffein.work'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f11bb0cc9000004030046304402201b17550e65fa512aa229eba4ef89b066a1f477796ba29c2dbfe4f646f2073b77022024ed08cf6f6c3eacecb5dcf55951a9f63d4ef330d1d1e89e4f49313abf0437bd00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f11bb0cf40000040300483046022100acb5a802faf0742f10f1d0e0e77594f7bd968be4bf448616b7bcb3d87f230ba302210088f190816db61f68c987132464c00e11a6633af8a390d61c809cfde7f0b28dec
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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