thealternativepac.org

Issued by R3

About this certificate

This digital certificate with serial number 03:d8:6d:6e:58:31:07:a5:50:45:f5:d9:24:76:7b:23:0e:a2 was issued on by Let's Encrypt.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=thealternativepac.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d8:6d:6e:58:31:07:a5:50:45:f5:d9:24:76:7b:23:0e:a2
Serial Number (int): 334983307843135034040601061917121463914146
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 29:78:0c:6d:79:d2:69:d2:16:1e:62:94:88:19:c6:23:39:b6:8f:3f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fc:00:d3:ff:5c:5e:f7:21:13:73:c2:bc:0e:a4:fe:11:9d:31:35:1e
Fingerprint (sha256): 12:6a:e8:8e:dc:18:58:9f:29:8e:ed:a9:fa:5a:5f:41:7d:2c:b1:f0:73:ff:3f:e1:1b:ee:b6:bc:f0:61:5d:ea

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate thealternativepac.org

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thealternativepac.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

affordabledesignerapparel.com
contenttvremote.com
coolflips.com
cryptotankdaily.com
dancewe.com
domainshakes.com
frankclips.org
gaymalecams.com
houstontexasinsulationcompany.com
interviewquestionstoask.com
joeandmax.com
legalmagazine.com
meatmansauce.com
medicalapartheid.org
onlinejobapplications.com
rlwtx.com
stardarts.com
thealternativepac.org
thoughtforthesoul.org
threeriversdumpster.com
uscislawyer.com
winnebagofund.com

Other certificates including the domain name thealternativepac.org

(limited to 100 certificates)
skjv.bible
thealternativepac.org
thealternativepac.org
calgary-basements.ca
thealternativepac.org
thealternativepac.org
thealternativepac.org
livelyconnection.club
fatsof.com.liquor.cool.thealternativepac.org
inna.zone
xsa.co.za
halfmarathonclub.org
hydratight.ca

Certificate

The complete raw certificate details for thealternativepac.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGpjCCBY6gAwIBAgISA9htblgxB6VQRfXZJHZ7Iw6iMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAyMjkxNDIyMTFaFw0yNDA1MjkxNDIyMTBaMCAxHjAcBgNVBAMT
FXRoZWFsdGVybmF0aXZlcGFjLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBAKa0ChqgPX1tPhUzfR8PERki7E2zENkMDcyf83ww3Rh/ddIYHLQAHRSK
/O2PwWkX9u+4ZJvzeGjCC2zL57+xmAq/ZTuzcU+/v7N6ey4zPIbQ/IIJ1sqByr6s
7EuDKvZ3Af55EKA+0zwN/tOZLYRL5/UwKP6Kgj/m/FS8nl7nLW1YeqsVrAGHChVT
Q3WGHNVnD7wiz5+WxRum1UjEw07/TBD0CON+Tk3LzPl9n5pV0bJyZp+37fAztciX
lT4xMg2v0SaplfUk1+N+hIub1ZHUdDI4rfHSs3v0EsQvji3+tY+tpqjkUD9ajuC2
Z6SL7veyzc/gsugYycwBbqLtBl8O+bkCAwEAAaOCA8YwggPCMA4GA1UdDwEB/wQE
AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIw
ADAdBgNVHQ4EFgQUKXgMbXnSadIWHmKUiBnGIzm2jz8wHwYDVR0jBBgwFoAUFC6z
F7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVo
dHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxl
bmNyLm9yZy8wggHPBgNVHREEggHGMIIBwoIdYWZmb3JkYWJsZWRlc2lnbmVyYXBw
YXJlbC5jb22CE2NvbnRlbnR0dnJlbW90ZS5jb22CDWNvb2xmbGlwcy5jb22CE2Ny
eXB0b3RhbmtkYWlseS5jb22CC2RhbmNld2UuY29tghBkb21haW5zaGFrZXMuY29t
gg5mcmFua2NsaXBzLm9yZ4IPZ2F5bWFsZWNhbXMuY29tgiFob3VzdG9udGV4YXNp
bnN1bGF0aW9uY29tcGFueS5jb22CG2ludGVydmlld3F1ZXN0aW9uc3RvYXNrLmNv
bYINam9lYW5kbWF4LmNvbYIRbGVnYWxtYWdhemluZS5jb22CEG1lYXRtYW5zYXVj
ZS5jb22CFG1lZGljYWxhcGFydGhlaWQub3JnghlvbmxpbmVqb2JhcHBsaWNhdGlv
bnMuY29tgglybHd0eC5jb22CDXN0YXJkYXJ0cy5jb22CFXRoZWFsdGVybmF0aXZl
cGFjLm9yZ4IVdGhvdWdodGZvcnRoZXNvdWwub3Jnghd0aHJlZXJpdmVyc2R1bXBz
dGVyLmNvbYIPdXNjaXNsYXd5ZXIuY29tghF3aW5uZWJhZ29mdW5kLmNvbTATBgNV
HSAEDDAKMAgGBmeBDAECATCCAQIGCisGAQQB1nkCBAIEgfMEgfAA7gB1AEiw42va
pkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjfV1dMoAAAQDAEYwRAIgBv1X
pwLLCuiv5CtpIf5Rl9dQab817mkpkaG8mun075ACIE+CLnZvDb43/kG3E8leTmsG
7DjmUB/+dYJr2OnTkUeJAHUAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H6
1BcAAAGN9XV0yAAABAMARjBEAiANCnwmciETY4FbZbGLXOC9uEKSzlV0ecluLx59
n0CtiwIgQB2P2va6QBzIJC6Pp67kuO1oazjPPZHvMT9JaL0XguYwDQYJKoZIhvcN
AQELBQADggEBAAZk50tXK51l8vhd3jY6RSOC9NR9IKleP9nI1kPivGwQtc4uPYE1
w+FjmiBOn/aISRseSGCl+J/P2gzl3aoHSGYlygUrf5cEDuX3gNIkMdgg2fVZMJG+
TfapruRV/PUVop4vghfRoUO05MR3xxitVhjXvLH46vxFCbKbOlVLcHTprfABCBFb
pXInERtXBi8//7CKlYTg+I5RhpGek3BGk3YoTfXobLJWJBBcCK6Qm1zw5FIJ4c8+
dd3QUPZt7L7gr+l3FfSA7lqxbBv+6BX85JPl9iqn8DKCQKcjQrtPxEIeEeff/PDm
u4OlRcmLLjHnTvydtxv7Rabxx+xiLf1Sb+M=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprQKGqA9fW0+FTN9Hw8R
GSLsTbMQ2QwNzJ/zfDDdGH910hgctAAdFIr87Y/BaRf277hkm/N4aMILbMvnv7GY
Cr9lO7NxT7+/s3p7LjM8htD8ggnWyoHKvqzsS4Mq9ncB/nkQoD7TPA3+05kthEvn
9TAo/oqCP+b8VLyeXuctbVh6qxWsAYcKFVNDdYYc1WcPvCLPn5bFG6bVSMTDTv9M
EPQI435OTcvM+X2fmlXRsnJmn7ft8DO1yJeVPjEyDa/RJqmV9STX436Ei5vVkdR0
Mjit8dKze/QSxC+OLf61j62mqORQP1qO4LZnpIvu97LNz+Cy6BjJzAFuou0GXw75
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334983307843135034040601061917121463914146
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-29 14:22:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-29 14:22:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thealternativepac.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21044339395325587727506890008316455361004171991976223317607194501376531602085318421354422023643980819923219863380341346956896823931136132757572967786573672935073539882694260712927229818778813982055970992492167847136552626124281732849200815849600604679189668242981249920160998575467224905069239953008108464263892283846128064323651874992185662155534964156519685902934370917448660308658342925350962021653770850158180269800574959889706967093747310002477630900007673994370644750985189455943969625270032833393689942219642176280199125248882583397844304853479931057888662367380988790909541778438495641891683813034726639204793
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							29780c6d79d269d2161e62948819c62339b68f3f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (454 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affordabledesignerapparel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contenttvremote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coolflips.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptotankdaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dancewe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainshakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frankclips.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaymalecams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstontexasinsulationcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interviewquestionstoask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joeandmax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meatmansauce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medicalapartheid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinejobapplications.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rlwtx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stardarts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thealternativepac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thoughtforthesoul.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'threeriversdumpster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uscislawyer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winnebagofund.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018df57574ca0000040300463044022006fd57a702cb0ae8afe42b6921fe5197d75069bf35ee692991a1bc9ae9f4ef9002204f822e766f0dbe37fe41b713c95e4e6b06ec38e6501ffe75826bd8e9d39147890075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018df57574c8000004030046304402200d0a7c2672211363815b65b18b5ce0bdb84292ce557479c96e2f1e7d9f40ad8b0220401d8fdaf6ba401cc8242e8fa7aee4b8ed686b38cf3d91ef313f4968bd1782e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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