www.hjvv.nl

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b0:81:cf:4a:1b:c1:c5:56:e5:f4:cf:85:3a:14:4d:6b:ff was issued on by Let's Encrypt.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.hjvv.nl

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b0:81:cf:4a:1b:c1:c5:56:e5:f4:cf:85:3a:14:4d:6b:ff
Serial Number (int): 321399101093369320600105520890857990745087
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a8:06:6d:64:52:d6:f4:cb:a1:cf:e5:79:e1:ac:0c:a9:7d:94:4e:0a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f3:b3:20:b4:b7:e8:80:71:70:46:33:bc:3b:b6:a8:75:83:7b:25:ab
Fingerprint (sha256): 19:98:13:c8:5f:8c:1a:3a:9d:a0:52:07:6f:52:61:a0:21:ff:35:de:31:73:46:d8:52:b6:3e:34:0b:a9:5e:41

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.hjvv.nl

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hjvv.nl

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hjvv.nl
kwaliteitszorg.hjvv.nl
main.hjvv.nl
main.tickitapi.nl
opendag.hjvv.nl
plantenactie.hjvv.nl
schoolplein.hjvv.nl
techniek-api.hjvv.nl
techniek.hjvv.nl
tickit.hjvv.nl
timer.hjvv.nl
www.hjvv.nl
www.kwaliteitszorg.hjvv.nl
www.main.hjvv.nl
www.opendag.hjvv.nl
www.plantenactie.hjvv.nl
www.schoolplein.hjvv.nl
www.techniek-api.hjvv.nl
www.techniek.hjvv.nl
www.tickit.hjvv.nl
www.timer.hjvv.nl

Other certificates including the domain name hjvv.nl

(limited to 100 certificates)
www.hjvv.nl
travelgame.lob.com
www.taptechie.com
www.hjvv.nl
www.hjvv.nl
www.hjvv.nl
www.hjvv.nl
www.hjvv.nl
dev.widget.shop.klappert.nl
acc.dots-and-boxes.hjvv.nl
vodras.com
www.hjvv.nl
www.meu.org.in
www.hjvv.nl
we-qa.bop-tech.com
opendag.hjvv.nl
www.hjvv.nl
digiprodigy.tech
www.hjvv.nl
sketchbook.timeblur.io
cdn.tttm.us
xn--sknad-vua.fagbrev.io
www.tracking.sb-group.dk
travelgame.lob.com
www.hjvv.nl
www.taptechie.com
brain-store.elrego.com
www.hjvv.nl
www.tracking.sb-group.dk
l.xn--fz4a.my.id
www.onlinecvs.xyz
acc.dots-and-boxes.hjvv.nl
chat.xujan.com
xn--sknad-vua.fagbrev.io
www.hjvv.nl
brain-store.elrego.com
www.hjvv.nl
aircloudproapps.hitachiaircon.com
xn--2e0bj6q8to.xn--9t4b29cmcb21sgvs.com
training.asiapacificforum.net
www.mototaxigo.com
www.hjvv.nl
www.hjvv.nl
xn--brstappen-17a.se
www.hjvv.nl
www.hjvv.nl
school.ulife.cm
xn--2e0bj6q8to.xn--9t4b29cmcb21sgvs.com
www.hjvv.nl
dev-video.tfimedia.in
www.hjvv.nl
www.hjvv.nl
r42.ch
www.bitfried.com
www.hjvv.nl
www.hjvv.nl
r42.ch
www.hjvv.nl
deep.sugarlive.co.id
yantrik.in
www.hjvv.nl
www.hjvv.nl
xn--frskring-2za1p.granat.app
dashboard.proiily.com
xn--voldinrerelasjoner-tub.com
www.hjvv.nl
open.mybiz.stg.3o3.co.kr
srv.ms
www.canererdogan.tech
www.hjvv.nl
we-qa.bop-tech.com
redirect.xrex.io
www.hjvv.nl
andhaadhirehab.in
www.onlinecvs.xyz

Certificate

The complete raw certificate details for www.hjvv.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwOVKpOFrGJAO4ACegPG3
5/emUTDVfQt80Ylu3YXR8w+mafWO6oKJYH91fkwzkuXt8HJ+3ipAHDgk8lTqVHJG
o5wxhli+ocqObP9P+9F89u2iPZ16xGNpggD5J80EDXLhnRGkkoiZDxCvpcEiteQJ
3R7rS6KHqeDhofMXHHHd250Cm6J86HcJt3p6yuA21h86CUUp7jbJB2YNMOJYH7up
AmZA0WZ+1r6RCA5cLQvEKDllZ7RaoL+je7aRdpI/ilnPexJxytSW7MS+JFC6NwQU
OJ/KhpW/HDvNzH/JAHmyKoFANFDgyHBFoTAyQRf4zH6yP0ezompxwAv4oGq44WhQ
76G+NWkY6TacxkVLkIJoEir/m5xeacEFECz9ysK7hohQUz0w+pP7/OGD2XJ/PX4z
r9rvQMk4AIiQcxBZp/dDH2bESWxbk6pcIAsz7LCslrxvIallsPzdKQmBjs8qE3nd
gBgx9galNZw6GAawjnznKKZXUIdCJosxXnmmlgJ8f2yZAfSIvG7nsYb2YRYgSsHQ
uo6nWfdX8fXRAFhhk1NOZNrPoGm8S+/T4hqU3kw49BhTN7S2kEsbaGzSl3B9Kxa5
6S0T1J9sJYO98o8WHmKeiDV96wr0Zst8bYNqsHxGP1TjNZuiUd3XOQOfjDbN0W6R
CH/zUsh/bYsCWSiY4I4baPkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321399101093369320600105520890857990745087
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-25 06:56:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-24 06:56:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hjvv.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 786945676792576399637378778589120340226831415349061732312351853268348320069054562983862464209141651974153759428055595784467219295681879468078314057450297345258536124853081647765249287464266233076574306358349516545508312630602554332668917298473690627072527878770593455472444062023156519931807876690849358748516552693126277376421192974184216983365482724704671810777998706519700202067588011363856785250726303804607937851976793582798858196807108157319990705216184263164992353538239464215543046988678710038458000313051015318395630085141695657030409307592485749789736286196975064943855595368353839971382574821190284929238721816370644444743256463086154155842973717013035721429023697483036782879971948661449785133992811144213044829501516585205211875348370803812855468350998611039876992105061088806604371905733429495009918068122319290067995679411095385852515278473906777911131280184497151150821323878933040997702658609551781825979597556028830280994945194214599393041577310762120789767534061216529898031824778643360861601103752216903372542411606954823715729079296628303437402604795873329668288529886196331093397736598544628884702951864553578495731810145037900124456456482258807006652877384868009813460820397687898044234820755161670219426654457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a8066d6452d6f4cba1cfe579e1ac0ca97d944e0a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (419 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kwaliteitszorg.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'main.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'main.tickitapi.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendag.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plantenactie.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolplein.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techniek-api.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techniek.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickit.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timer.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kwaliteitszorg.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.main.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opendag.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plantenactie.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolplein.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.techniek-api.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.techniek.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tickit.hjvv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timer.hjvv.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f63360000001660fbb0da8000004030047304502203ce1d83348cfbf5055785491053c659052aa0e53c98c10ddcdef80f330d4f709022100c0c712e1b0a1a911a1ed05e00063d0b87e1e5676f7ff7f157874adf47243d867007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001660fbb0dba00000403004830460221009d6d9d3b900b7afb897d682dee965c14567e70519f2d9bd4175546da9110b696022100bc574e1942642c21c2d0f431fbc44e14e93e3646b4c4c41678a0f92b835ee22c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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