api.letstalkscience.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:df:d0:4f:26:0c:02:27:01:87:e0:39:59:13:eb:c3:85:e5 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api.letstalkscience.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:df:d0:4f:26:0c:02:27:01:87:e0:39:59:13:eb:c3:85:e5
Serial Number (int): 424609001936668319706064871042857316877797
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d5:9d:bc:fd:1c:2d:41:22:43:0d:fc:b4:20:3c:96:a1:7e:44:62:90
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e6:a3:21:22:6c:fa:e5:6d:3c:5f:d9:bd:a3:4c:81:79:d4:87:9e:6a
Fingerprint (sha256): 1a:15:aa:35:02:bf:6c:52:65:1e:57:2d:68:6e:2e:bc:79:8e:78:f8:d0:5c:b0:9d:4e:d9:e5:38:53:35:d9:20

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate api.letstalkscience.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.letstalkscience.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.letstalkscience.ca
api.parlonssciences.ca

Other certificates including the domain name letstalkscience.ca

(limited to 100 certificates)
api.letstalkscience.ca
letstalkscience.ca
portal.simforcanada.com
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
remote.letstalkscience.ca
letstalkscience.ca
pps.explorecuriocity.org
letstalkscience.ca
volunteer.letstalkscience.ca
pre.letstalkscience.ca
pps.explorecuriocity.org
volunteer.letstalkscience.ca
auth.letstalkscience.ca
letstalkscience.ca
letstalkscience.ca
app.letstalkscience.ca
api.letstalkscience.ca
volunteer.letstalkscience.ca
letstalkscience.ca
outreach.letstalkscience.ca
remote.letstalkscience.ca
support.borealdesign.com
staging.letstalkscience.ca
pps.explorecuriocity.org
volunteer.letstalkscience.ca
api.letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
outreach.letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
letstalkscience.ca
brightspace.letstalkscience.ca
volunteer.letstalkscience.ca
pps.explorecuriocity.org
volunteer.letstalkscience.ca
*.letstalkscience.ca
letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
letstalkscience.ca
letstalkscience.ca
letstalkscience.ca
helpdesk.workcentral.ng
remote.letstalkscience.ca
dct.letstalkscience.ca
letstalkscience.ca
outreach.letstalkscience.ca
volunteer.letstalkscience.ca
letstalkscience.ca
volunteer.letstalkscience.ca
letstalkscience.ca
volunteer.letstalkscience.ca
support.corp.io
letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
*.staging.letstalkscience.ca
*.letstalkscience.ca
volunteer.letstalkscience.ca
pps.explorecuriocity.org
app.letstalkscience.ca
volunteer.letstalkscience.ca
app.letstalkscience.ca
app.letstalkscience.ca
staging.letstalkscience.ca
volunteer.letstalkscience.ca
*.staging.letstalkscience.ca
pps.explorecuriocity.org
letstalkscience.ca
letstalkscience.ca
pps.explorecuriocity.org
outreach.letstalkscience.ca
volunteer.letstalkscience.ca
support.atlasti.com
auth.letstalkscience.ca
auth.letstalkscience.ca
letstalkscience.ca
volunteer.letstalkscience.ca
help.trkall.com
support.letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
letstalkscience.ca
letstalkscience.ca
outreach.letstalkscience.ca
*.letstalkscience.ca
letstalkscience.ca
volunteer.letstalkscience.ca
pps.explorecuriocity.org

Certificate

The complete raw certificate details for api.letstalkscience.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGfTCCBWWgAwIBAgISBN/QTyYMAicBh+A5WRPrw4XlMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMTMxNzQwMjZaFw0y
MDAyMTExNzQwMjZaMCExHzAdBgNVBAMTFmFwaS5sZXRzdGFsa3NjaWVuY2UuY2Ew
ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDZcBZ5ZBBDYf0gt7OiQAc2
i0ndXI5WrkPw3sgWaaBjteakrWmDSnxi6vzPmPRqdZCRZE6DQESRZO+H2J5oy3Fw
kom4RfPNkpf6XmbBdWIc2grdow/9JhP0v03geWUECz7BioekDixH4GT1KZTC583s
Lm8JKxy2CNjEiazgU0gA6NSytCB3xcmhDx4M69QulQQc1YlaH+xNMk0ArN579BZQ
wp0C2+xTfF4ZhqE/CLFyYrEbmGiBiCMG9b+GgQXwN0emNQzBAVNPQWPsXubraY+o
nq+39T9lw9sDF6pcEmB3gXht27USFSVixVFfdVSoBVIp+5GhpeFk7bUgDKk75Yjf
gVpWgP7jIFK8Vy+SE920QuwdC/xWXwa+FciM2DNQPsx96rlntNlgWFUJDHAQGfHE
VXSs7S/2NSCe2dB5rqrLcKoyTXVVVAQRXsjXK7Og+b9iUPSE2QKwnUTyjF2GfswH
Gav9Wyaka0hDPJi2A8DM0Dy2ivcb4+mjWztBJk+FPsi1atujlRikSwWszvgOvfbA
ZMtXCUZD50APKyu55G3Uj5WKiVESq8w4LaiFMFC3PCX81Dsuq5tOsXjPVbZTy+dC
kdg2PuqEeA3Z9aXXBWXE3HNCuV5uTioM/vG9V7D1IoCcyHuC7VysWZk9ys0jfwlx
HH4t8GxTMov4Vu6ozw7tGQIDAQABo4IChDCCAoAwDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud
DgQWBBTVnbz9HC1BIkMN/LQgPJahfkRikDAfBgNVHSMEGDAWgBSoSmpjBH3duubR
ObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9v
Y3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9j
ZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMDkGA1UdEQQyMDCCFmFwaS5sZXRz
dGFsa3NjaWVuY2UuY2GCFmFwaS5wYXJsb25zc2NpZW5jZXMuY2EwTAYDVR0gBEUw
QzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDov
L2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwBe
p3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAW5mERf+AAAEAwBIMEYC
IQC1IlN6cNy9ATFrZi9n/qX0JoVpBKonZ7YsOSKbgTSKKgIhAKDynMgT2MOIHT6D
DpBJ5ba6ouG1bZV/WyuLvoH0zXp2AHYAsh4FzIuizYogTodm+Su5iiUgZ2va+nDn
sklTLe+LkF4AAAFuZhEX0AAABAMARzBFAiEAyyI1dSpB0O0QXsedlZzd+BBGIvUj
wgQCieCFlKbQ9rECIAWGV0Yu90QwEniZBH6gtdhzCqScDbaaJvbGIgmTtMz3MA0G
CSqGSIb3DQEBCwUAA4IBAQAwGEo5Re601k+voZDx6IDjkax+gsOUDOj1d+q1h3MF
hjHY8hXcSZVr3kIRRRGTDRJFLpOYRkw2MD/iuN0EDCwfNnxoNoB4qFdkFBCpUWsy
yEgqjAQYgROoZluD3O+Cqblrvdw19xOi9cWFm7oMmR2GwusX37wFgbgyhFQ8UYLP
uz2hRn600lRALcY/MxRUEorrnrbG1HUgtMuDlIhF+wcGL6MyW6gUqZ4bagZGzhUl
jurAHPFIBbHMcgQ5OmnOujIV3/yjAQv3rlTBEI5k8KHBAuK3trYgvbm9vE8w0eK3
8GhZCRvN7mvX0VAWnYrgon4+Lam+G4Ss5vhfszR1BGM5
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 424609001936668319706064871042857316877797
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-13 17:40:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-11 17:40:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.letstalkscience.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 887069006067649560321050308529213645663762109827832038817166804618428549590994166710231170615765307295583662794544061625018537807200317425553300919665757671991977083021920652084555826560353212974619174409310918352756811116475133977888388780101812046832139271566300721763465097565202889322004624837171606435747235455129230924839655727077475253793296380126587790777169034767544317149195497551036597609320705609995003355531088080508519342331451167563725142539970407136516724318227857073524582113263665922654405878372322184189373566109680483605284388254182373325075513574153317086481439395980734246045683564897516569480070150641045676543445464420524175339213007113738239993174178268127383992157005424973246198906672106975817593847554761716345640333337921880499766934591578239457299992788305583776002955806853989983817013683732280429814431021913457518367301519858900768945356887280289085205192452446087221710630289996140428799330827695776781178817879819085517848558903014380947925015845198893293877048915691711045647672854579119190330383555497950107146357405185493964069575417114931128497845055850775307460895083756974389250902209129040526809893765145323951265745953506015224087181875341534711038093867903388346246783560169298185283366169
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d59dbcfd1c2d4122430dfcb4203c96a17e446290
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.letstalkscience.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.parlonssciences.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e661117fe0000040300483046022100b522537a70dcbd01316b662f67fea5f426856904aa2767b62c39229b81348a2a022100a0f29cc813d8c3881d3e830e9049e5b6baa2e1b56d957f5b2b8bbe81f4cd7a76007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e661117d00000040300473045022100cb2235752a41d0ed105ec79d959cddf8104622f523c2040289e08594a6d0f6b10220058657462ef74430127899047ea0b5d8730aa49c0db69a26f6c6220993b4ccf7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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