letstalkscience.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cf:a3:43:5b:93:3d:f9:a5:1d:0e:19:31:89:af:86:f9:34 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=letstalkscience.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cf:a3:43:5b:93:3d:f9:a5:1d:0e:19:31:89:af:86:f9:34
Serial Number (int): 331992321652482459207278167786648712444212
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d0:a9:9f:54:21:14:f7:2c:97:c4:0e:7a:10:f0:8d:7d:de:05:33:b9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b7:2f:c2:ec:ab:c8:25:e1:20:30:e5:ca:b6:ea:35:f8:6b:4e:f0:2a
Fingerprint (sha256): 1c:41:de:97:dc:53:b4:21:1a:7f:21:ae:3d:0a:05:96:f5:2c:c3:5f:67:4a:76:2a:4d:31:e0:14:94:46:19:e0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate letstalkscience.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for letstalkscience.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

letstalkscience.ca
parlonssciences.ca

Other certificates including the domain name letstalkscience.ca

(limited to 100 certificates)
api.letstalkscience.ca
letstalkscience.ca
portal.simforcanada.com
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
remote.letstalkscience.ca
letstalkscience.ca
pps.explorecuriocity.org
letstalkscience.ca
volunteer.letstalkscience.ca
pre.letstalkscience.ca
pps.explorecuriocity.org
volunteer.letstalkscience.ca
auth.letstalkscience.ca
letstalkscience.ca
letstalkscience.ca
app.letstalkscience.ca
api.letstalkscience.ca
volunteer.letstalkscience.ca
letstalkscience.ca
outreach.letstalkscience.ca
remote.letstalkscience.ca
support.borealdesign.com
staging.letstalkscience.ca
pps.explorecuriocity.org
volunteer.letstalkscience.ca
api.letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
outreach.letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
letstalkscience.ca
brightspace.letstalkscience.ca
volunteer.letstalkscience.ca
pps.explorecuriocity.org
volunteer.letstalkscience.ca
*.letstalkscience.ca
letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
letstalkscience.ca
letstalkscience.ca
letstalkscience.ca
helpdesk.workcentral.ng
remote.letstalkscience.ca
dct.letstalkscience.ca
letstalkscience.ca
outreach.letstalkscience.ca
volunteer.letstalkscience.ca
letstalkscience.ca
volunteer.letstalkscience.ca
letstalkscience.ca
volunteer.letstalkscience.ca
support.corp.io
letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
*.staging.letstalkscience.ca
*.letstalkscience.ca
volunteer.letstalkscience.ca
pps.explorecuriocity.org
app.letstalkscience.ca
volunteer.letstalkscience.ca
app.letstalkscience.ca
app.letstalkscience.ca
staging.letstalkscience.ca
volunteer.letstalkscience.ca
*.staging.letstalkscience.ca
pps.explorecuriocity.org
letstalkscience.ca
letstalkscience.ca
pps.explorecuriocity.org
outreach.letstalkscience.ca
volunteer.letstalkscience.ca
support.atlasti.com
auth.letstalkscience.ca
auth.letstalkscience.ca
letstalkscience.ca
volunteer.letstalkscience.ca
help.trkall.com
support.letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
volunteer.letstalkscience.ca
letstalkscience.ca
letstalkscience.ca
outreach.letstalkscience.ca
*.letstalkscience.ca
letstalkscience.ca
volunteer.letstalkscience.ca
pps.explorecuriocity.org

Certificate

The complete raw certificate details for letstalkscience.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGbzCCBVegAwIBAgISA8+jQ1uTPfmlHQ4ZMYmvhvk0MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMTMxNDE1MjhaFw0y
MDA2MTExNDE1MjhaMB0xGzAZBgNVBAMTEmxldHN0YWxrc2NpZW5jZS5jYTCCAiIw
DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALCjUWVfCDnFnJgQHHy3P7M3iTmo
diDvdzLRD9Bs+eAZ3mvEDYvV/HOSvdje5tLS1PRHZ4wN1WvhRvMtMCvK6w1TObIU
FAgPvrg8zg2zEYviMGlijq2YY4oV+dOK9dvTTeqx9t3xqxQMvfKuDpkHXBa6rwK5
KV4M+/shsXM5RrEv63T8zEUt29vurD7agwCK8L+LF35FSikRi0bP17i0lqvMLqfU
sNdrNJWFtAmwx0ut4QkUP7OfQuuDanAWg6j6OX6AH2IBTyC4iWDaMleAiGxnUgL1
DcCcwDPN+1RCpSeoMCfFVsZPPI1UTdC0XdOR3jBIjiavHXpwds7RfnV8g2QkmoTY
Ovx5DsrqFXIp+SLYCobbKauzlczGdiyplQudtFc6U2eOuJGLVH+xYQkXx6BC2OTv
odIIQn6baTGXDz5JfqGxiCO3jamrgEvJMvxDkok1t9sAVpWm3dErC6VBKBXIEKGh
JSC+0Dc6wxzUZInEWcvY9cvx3qoJxtJznqxcteonjqc6/ZVV6vclSSuH9GtjBNkW
NiRIgZRg5WItCg3lK9C2+5L8fQNoZkG7R0tgaVbAKrd8Q28sqQwt5CXDqBCdsaiZ
t56OK/0++CVyl/9HGcU5l5626wvmDcfHhlKYF9kLAAyTLMc4eHPQqL/abjA9/gqw
1WjR/E02bbqTaSWRAgMBAAGjggJ6MIICdjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FNCpn1QhFPcsl8QOehDwjX3eBTO5MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF
Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au
aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu
aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wMQYDVR0RBCowKIISbGV0c3RhbGtzY2ll
bmNlLmNhghJwYXJsb25zc2NpZW5jZXMuY2EwTAYDVR0gBEUwQzAIBgZngQwBAgEw
NwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5j
cnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQDnEvKwN34aYvuOyQxh
hPHqezfLVh0RJlvz4PNL8kFUbgAAAXDUduz1AAAEAwBGMEQCIB4VrwMvf7Dsd3DD
b/jRnXVfVbBGoqBsucCisy73vAwzAiAbwR58UV+6ohU392ImmHWQoSanL/+sE5Hq
fWGAmSskCQB2ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABcNR2
7QMAAAQDAEcwRQIgU+wpL/I5J90g4p3nlNWo+5hwOKTddGupBPKeh8wGDiACIQCD
VPJEz62M56hkywqeym4fACz4E0U5KacCrgeahDb5mTANBgkqhkiG9w0BAQsFAAOC
AQEAlIhO4CJ6GGlH4y6OUtvSP4U1Cx/nXV0zeI3dA1e+sJEvnnEOebKFI8dw/oE7
9MxzSG4vUIegUV3lXnBPFW1IG0o0aHiFGAiBSgd3ma7pghMP4M19BLzqL/6T+1Vv
6MGIasbALjxU1o/m/aMZyRtVxG+Nyn5YkxYLihCTMrfwofC1DcMdsBBKzZ2N8LfM
tf1QrQ5vTLO9lETIyv1rT/Byo2XtbFQbztmWYjE/AoemuZiYtgYA+sC0cuC4nUP+
r8u2EO5B8XUZjwjobDOU0TzNCXEG8cb0WD4kNIiAqRr1rFs55srqZHU1SBNGnHFt
dhlWsPkhWSYrAXqt82rAyW5nMA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331992321652482459207278167786648712444212
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-13 14:15:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-11 14:15:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'letstalkscience.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 720620008777675131681843055820863359906380409746615794269214859692814907450276025413870436037347188016469239886620749483046152789527313269281316367246315050257143781461631772561577380335666287504526647277168617824941130226597168979800837836742625331378162543661272308947067036207335946635413862208099923634895596542363883243601699617995343303223051323268007149729896432338556915236171518180080256214336198637080820740569051359754795680112733682416527362106850457008428368977350971277186314711010544130932944016905580688528604848201926106078417743167231321582923601313642900603323413986933667748037271652720850259182302842177609929651008723104774426357834709202409801607799437291749408667802211970377423691161884412220598041485652012294084388929091491686805972576550223488029214230705084098084508021367343660563298801749553938556116472825146747366186307324391697983961238494944985081172447494889290157659428020041555196732231241176842273296537113515936049084733220170049268531018655566203158431462313607580045076451698640966785783207613725116283216167262480738124284692281447012439232212820651956510611740108519401168094267464272388323135738334217953379330610602970139335891068855352905911077510249951003005879551233150027004266489233
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d0a99f542114f72c97c40e7a10f08d7dde0533b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letstalkscience.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parlonssciences.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170d476ecf5000004030046304402201e15af032f7fb0ec7770c36ff8d19d755f55b046a2a06cb9c0a2b32ef7bc0c3302201bc11e7c515fbaa21537f76226987590a126a72fffac1391ea7d6180992b2409007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170d476ed030000040300473045022053ec292ff23927dd20e29de794d5a8fb987038a4dd746ba904f29e87cc060e200221008354f244cfad8ce7a864cb0a9eca6e1f002cf813453929a702ae079a8436f999
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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