gs2foundation.org

Issued by R10

About this certificate

This digital certificate with serial number 03:6f:9d:a5:c6:d5:9b:c9:1c:dc:78:3b:7f:d4:39:b2:43:a0 was issued on by Let's Encrypt.

With 54 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=gs2foundation.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:6f:9d:a5:c6:d5:9b:c9:1c:dc:78:3b:7f:d4:39:b2:43:a0
Serial Number (int): 299317750080665712868385192923403488740256
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 01:62:93:63:3e:29:66:62:42:11:ea:af:39:80:39:55:ef:48:38:e8
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): 02:63:f8:9d:e0:78:0d:28:8c:34:27:2c:ee:0d:47:70:3a:d4:a6:c7
Fingerprint (sha256): 12:b0:86:06:9e:9f:42:05:23:78:6c:97:57:09:ae:43:89:91:d7:14:a8:f8:7f:d4:99:49:94:e9:f7:c0:8f:f6

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate gs2foundation.org

54

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gs2foundation.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

affiliatetoken.com
antidiscriminationlaw.com
arbitragefirm.com
arbitrageurs.today
book.mardukmethod.com
buysellrarecollectibles.com
canadavaccinepassport.com
casaproserpina.com
clayclarktowergardens.biz
cococoir.com
coloradowomensmag.com
daleamidei.com
earlingforsenate.com
engineeringcamps.com
etally.in
extremeindustrialcoatings.com
finediningnj.com
genderequitylawyers.com
gpsblog.com
graffitihill.com
gs2foundation.org
hempmakes.com
hemponhemp.com
historichomeplans.com
huntingtonchristmaslightsinstalled.com
joshelliott.com
katan.in
kebservices.com
keepabortionlegal.com
keywestjetskis.com
leadershipmonster.info
loeffingen.com
luvhoroscope.com
markkordic.com
mdtvs.com
metisnationofcanada.com
nationalism.info
offer.doubletreelubbock.com
patterncards.com
powhatancounty.com
realestateinvestorsdaily.com
republicanvideoproduction.org
roboticforex.com
rxketide.com
scihunttags.net
simpsoncounty.com
sullycounty.com
survivaldefenders.com
tenacitycombatives.com
thedyingproblem.com
tolero-lucror.com
walshcounty.com
www.holygrailofsugar.com
www.rowdiesrock.com

Other certificates including the domain name gs2foundation.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for gs2foundation.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQLQo8D38/yIHYWMtk1L
Fvy6MbWqk5HBXjbP6OSasjz/YFvlMGthM1ip3BC+2lL+rmG18wQIRKfL9eZC7CPT
j6F+DdWeCBSCaBUNIDxWWefaemyIj1bcv1GKlvMLIQFFaevrt23SGemAabS+RAHf
iLoCxtWWMzljIiEdrznbwYkyZ/SBNlA8lKo/HxJBvaxyp9JDD2aBLjmsxLmXLJ0S
rszzfgYXiJUmlOsKOVQWbILvk6xShLRbNJftIK1MBLmPnM02OgdrMdIgZMGEgk1f
u05cmEBUU87wwUtBRwMgh7lYP0Dc+EBcd+S3/bNUAmnEa6pL1lN0BqwHur5cccgS
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299317750080665712868385192923403488740256
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-08 06:53:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-06 06:53:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gs2foundation.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19820802007258724781414587217156614089129598660343266757823985622872509510782227464560703129967171505015533926615062759522509361920960209353121848322631466206481445112901565446563957791494661977558092975131968611050316521062782834676007168070242640340340934027417570548725902364853913653172625117903515930986071398940503353100093822556078226310885610160632505090894488274628458795291271861911352248490733016950979821175151734725040241498980738021001745016837456404783506567518103597525958503993429154207046658118025660770414970362775587421626068588684218474585570458529100622326936519227652976753834500963335489983097
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							016293633e2966624211eaaf39803955ef4838e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affiliatetoken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antidiscriminationlaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragefirm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageurs.today'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.mardukmethod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buysellrarecollectibles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadavaccinepassport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casaproserpina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clayclarktowergardens.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cococoir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradowomensmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daleamidei.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earlingforsenate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engineeringcamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etally.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extremeindustrialcoatings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finediningnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genderequitylawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpsblog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graffitihill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gs2foundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempmakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemponhemp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'historichomeplans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntingtonchristmaslightsinstalled.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joshelliott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katan.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kebservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keepabortionlegal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keywestjetskis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leadershipmonster.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loeffingen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luvhoroscope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markkordic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdtvs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metisnationofcanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalism.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offer.doubletreelubbock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patterncards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powhatancounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestateinvestorsdaily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'republicanvideoproduction.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roboticforex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxketide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scihunttags.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simpsoncounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sullycounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survivaldefenders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenacitycombatives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thedyingproblem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tolero-lucror.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walshcounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holygrailofsugar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rowdiesrock.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ff6d6db1e0000040300463044022026f0bfb6d635065e98c28a7a1129e234fdc1a8facd79143c7f201c06ddeb846d022055c30a489a0d46be046a4fec772b6eb4aa5443f557ae39ca3922686802d40c9500770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ff6d6db710000040300483046022100937a8403270401f42464150551a5f80da7e98e8da261811b09cbbae3934c5900022100d4fdf553813374838b8614b555d78946fb79874ec2223da58b20011ff63df5fd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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