foundry-usc-1.status.palantir.com

Issued by R3

About this certificate

This digital certificate with serial number 04:c7:a5:7c:d2:e3:63:a0:3e:56:26:a7:64:90:d2:16:3f:91 was issued on by Let's Encrypt.

With 37 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=foundry-usc-1.status.palantir.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:c7:a5:7c:d2:e3:63:a0:3e:56:26:a7:64:90:d2:16:3f:91
Serial Number (int): 416385305485744352649430383234397295230865
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8c:0f:69:84:92:97:06:94:a2:62:f4:03:b8:d4:8b:84:69:98:b6:f9
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d1:a3:cb:14:f8:3c:5e:27:da:1d:1f:89:8d:7a:dd:92:15:ac:00:86
Fingerprint (sha256): 1b:7f:86:52:7f:b1:56:77:75:e7:fd:b4:9a:79:69:a2:b3:0d:02:66:9a:6e:d8:bd:5e:97:2f:99:7e:34:fd:0a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate foundry-usc-1.status.palantir.com

37

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for foundry-usc-1.status.palantir.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

foundry-usc-1.status.palantir.com
getsquirestatus.com
status-http.esputnik.com
status.acrolinx.cloud
status.bcs-hr.com
status.bronco.ai
status.cleartrace.io
status.connect.youversion.com
status.crosoftware.com
status.crowdbotics.com
status.dconnect365.nl
status.disco.co
status.euroe.com
status.extole.com
status.formlabs.com
status.getweave.com
status.huntflow.ru
status.huntress.com
status.kinectcommunications.com
status.linc-ed.com
status.medsender.com
status.motionstatus.nl
status.pivotaltracker.com
status.qintel.com
status.rewardgateway.net
status.rinteria.net
status.salesplanning.varicent.com
status.sixty.app
status.skybloxsystems.com
status.smokeball.co.uk
status.syndica.io
status.vcec.cloud
status.vintrace.com
status.vmware-services.io
status.youngplatform.com
status5.securiti.ai
trust.govskope.us

Other certificates including the domain name palantir.com

(limited to 100 certificates)
amkstatus.nhn.no
e.ssl.fastly.net
impact.palantir.com
amkstatus.nhn.no
gear.palantir.com
gpvpn.palantir.com
sj-ravpn.palantir.com
canada.status.coconutsoftware.com
foundry-usc-1.status.palantir.com
training.palantir.com
PALANTIR TECHNOLOGIES
amkstatus.nhn.no
gpvpn.palantir.com
canada.status.coconutsoftware.com
gerrit-tr.palantir.com
canada.status.coconutsoftware.com
appstatus.motorolasolutions.com
athena.palantir.com
amkstatus.nhn.no
guestwifi.palantir.com
cds2.cvent.com
canada.status.coconutsoftware.com
palantir.com
edge-eu-a.palantir.com
www.palantir.com
foundry-usz-1.status.palantir.com
amkstatus.nhn.no
*.e.ssl.fastly.net
appstatus.motorolasolutions.com
devzone.palantir.com
appstatus.motorolasolutions.com
joyride-disp.palantir.com
files.palantir.com
gpvpn.palantir.com
blog.palantir.com
amkstatus.nhn.no
canada.status.coconutsoftware.com
*.e.ssl.fastly.net
amkstatus.nhn.no
foundry-usc-1.status.palantir.com
canada.status.coconutsoftware.com
cds2.cvent.com
foundry-usc-1.status.palantir.com
appstatus.motorolasolutions.com
canada.status.coconutsoftware.com
*.e.ssl.fastly.net
appstatus.motorolasolutions.com
regalia.palantir.com
Palantir Technologies Inc.
gpvpn.palantir.com
foundry-usc-1.status.palantir.com
dc-ravpn.palantir.com
info.palantir.com
foundry-usc-1.status.palantir.com
joyride.palantir.com
cds2.cvent.com
go.palantir.com
esentry.mi.palantir.com
appstatus.motorolasolutions.com
files.palantir.com
appstatus.motorolasolutions.com
edge-usw-a.palantir.com
canada.status.coconutsoftware.com
amkstatus.nhn.no
cds2.cvent.com
legal.palantir.com
palantir.com
amkstatus.nhn.no
foundry-usc-1.status.palantir.com
appstatus.motorolasolutions.com
*.e.ssl.fastly.net
gear.palantir.com
regalia.palantir.com
resources.palantir.com
foundry-usc-1.status.palantir.com
regalia.palantir.com
*.e.ssl.fastly.net
foundry-usz-1.status.palantir.com
cds2.cvent.com
foundry-usc-1.status.palantir.com
learning.palantir.com
PALANTIR TECHNOLOGIES
learn.palantir.com
plgpvpn.palantir.com
canada.status.coconutsoftware.com
mobile-gpvpn.palantir.com
amkstatus.nhn.no
foundry-usz-1.status.palantir.com
dns-vetting1.map.fastly.net
canada.status.coconutsoftware.com
cds2.cvent.com
*.e.ssl.fastly.net
*.e.ssl.fastly.net
canada.status.coconutsoftware.com
cds2.cvent.com
foundry-usz-1.status.palantir.com
*.e.ssl.fastly.net
gear.palantir.com
appstatus.motorolasolutions.com
foundry-usz-1.status.palantir.com

Certificate

The complete raw certificate details for foundry-usc-1.status.palantir.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsQ9n+jNk0JKctQ2dpKu
KdD60UQY5n0c1+hlkh4/UZwIWxfiOqMKNYq69DW+YndlzwfThF6IvyugbKqA43RV
dYadoek2wSnK2CglpFyE0jryti305CQAX0gaRCXCZwMqFFrqdGvlo+3mXRlLsbMG
PhK9RqZ5zhc5U+K/N79vXiI1uN9+DY6pUtD6/DS8eLdeos44nEUE56c2hEKSvkOX
ROz22NQGTJ5NKcdOEdHhpZNi/ngjr0mtOlhjJ7Ap062ZunDVhw4DBw6po4Qs1X2L
9umw3L+20pURFejSdxnnXCPSDrnv3thTORR5VEsH6ivZd7s8w7tw0ew7Enc5VtkO
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 416385305485744352649430383234397295230865
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-16 06:09:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-15 06:09:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'foundry-usc-1.status.palantir.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22062234970418014222024026883069403502737896921698731487165703818453233095465676074648815580274670649585041650146359884447433310362946771348347962950591838420437658902171389674688822739056191678887076611537914758878124004355923759227081063830590318471391380953183322082322911335994398487505385734484594612120172117944938666497712263422059447021027670315938587133598876248504557700165447605356678909925177514237669757630978960685383029869622033333003953961297330438288583552655820986201074136836119748869221564861432467954194761711748414421404554214251245601413505922345220765490874631419466876051128717362395633749597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8c0f698492970694a262f403b8d48b846998b6f9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (855 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundry-usc-1.status.palantir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getsquirestatus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status-http.esputnik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.acrolinx.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.bcs-hr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.bronco.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.cleartrace.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.connect.youversion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.crosoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.crowdbotics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.dconnect365.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.disco.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.euroe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.extole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.formlabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.getweave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.huntflow.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.huntress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.kinectcommunications.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.linc-ed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.medsender.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.motionstatus.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.pivotaltracker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.qintel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.rewardgateway.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.rinteria.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.salesplanning.varicent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.sixty.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.skybloxsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.smokeball.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.syndica.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.vcec.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.vintrace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.vmware-services.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.youngplatform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status5.securiti.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trust.govskope.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ee5bd88fa0000040300473045022024bd8c420f19b3c0c87da0f71315a72b36384b0f7cabe61ef7c2a2e28aa55119022100e07c312f54a39948d105d2ace7fc90796c8a5301d95735efb2e79a464845f84000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ee5bd892400000403004730450220081edf7509e17a509a0a1e508f64f47496c9769e0418320014e17d4c9f3c7030022100c8708e49f55b10d86f0e9ad30bb76bc809a35d49c889de3d36dc1043a7daf05b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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