mes-mms01.905kingstw01.yyz.beanfield.com

Issued by R3

About this certificate

This digital certificate with serial number 03:15:b2:2e:5c:71:96:d0:1e:d9:70:75:40:97:df:2e:97:c3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mes-mms01.905kingstw01.yyz.beanfield.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:15:b2:2e:5c:71:96:d0:1e:d9:70:75:40:97:df:2e:97:c3
Serial Number (int): 268719630804506795553841627481830685841347
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 36:fc:69:5d:79:d6:92:a4:af:6f:19:de:42:57:39:69:17:51:30:47
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 02:7b:db:fd:6d:8f:ed:4c:42:37:58:7f:c0:a9:68:0f:78:35:ee:c6
Fingerprint (sha256): 1f:17:1d:3a:9d:1a:e2:33:3f:e0:72:7c:d7:7f:5e:bd:f2:bb:81:24:78:2c:b9:46:7e:47:bf:5f:3d:1b:4c:84

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mes-mms01.905kingstw01.yyz.beanfield.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mes-mms01.905kingstw01.yyz.beanfield.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mes-mms01.905kingstw01.yyz.beanfield.com

Other certificates including the domain name beanfield.com

(limited to 100 certificates)
calling.beanfield.com
udrm.iptv.beanfield.com
udrm.iptv.beanfield.com
acom.fm.beanfield.com
mfe02.iptv.beanfield.com
fe.iptv.beanfield.com
*.teams.voip.beanfield.com
*.voip.beanfield.com
prd01.sap.beanfield.com
*.teams.voip.beanfield.com
mfe.iptv.beanfield.com
mfe01.iptv.beanfield.com
udrm.iptv.beanfield.com
mfe01.iptv.beanfield.com
*.beanfield.com
mfe03.iptv.beanfield.com
mfe01.iptv.beanfield.com
mfe02.iptv.beanfield.com
*.beanfield.com
mfe02.iptv.beanfield.com
udrm.iptv.beanfield.com
mes-mms01.905kingstw01.yyz.beanfield.com
mfe01.iptv.beanfield.com
*.sys.beanfield.com
udrm.iptv.beanfield.com
*.teams.voip.beanfield.com
mfe.iptv.beanfield.com
librenms.mserv.beanfield.com
mes-mms01.905kingstw01.yyz.beanfield.com
mfe.iptv.beanfield.com
mes-mms01.905kingstw01.yyz.beanfield.com
mes-mms01.905kingstw01.yyz.beanfield.com
mfe.iptv.beanfield.com
fe.iptv.beanfield.com
mfe01.iptv.beanfield.com
udrm.iptv.beanfield.com
udrm.iptv.beanfield.com
mfe.iptv.beanfield.com
mfe01.iptv.beanfield.com
mfe01.iptv.beanfield.com
librenms.pe.beanfield.com
mfe01.iptv.beanfield.com
udrm.iptv.beanfield.com
emslabapi.voip.beanfield.com
*.beanfield.com
mfe03.iptv.beanfield.com
mfe01.iptv.beanfield.com
mfe.iptv.beanfield.com
mfe01.iptv.beanfield.com
*.tor1sbc01.voip.beanfield.com
mfe.iptv.beanfield.com
*.beanfield.com
mfe.iptv.beanfield.com
*.beanfield.com
fe.iptv.beanfield.com
*.dev.beanfield.com
*.teams.voip.beanfield.com
mfe03.iptv.beanfield.com
mfe03.iptv.beanfield.com
mes-mms01.905kingstw01.yyz.beanfield.com
mfe.iptv.beanfield.com
udrm.iptv.beanfield.com
mfe03.iptv.beanfield.com
*.beanfield.com
*.staging.beanfield.com
mfe01.iptv.beanfield.com
mfe03.iptv.beanfield.com
udrm.iptv.beanfield.com
wifi.beanfield.com
mfe.iptv.beanfield.com
mfe02.iptv.beanfield.com
mfe02.iptv.beanfield.com
mes-mms01.905kingstw01.yyz.beanfield.com
mes-mms01.905kingstw01.yyz.beanfield.com
mfe02.iptv.beanfield.com
dev01.sap.beanfield.com
files.sec.beanfield.com
mfe03.iptv.beanfield.com
acom.fm.beanfield.com
fe.iptv.beanfield.com
udrm.iptv.beanfield.com
mfe02.iptv.beanfield.com
udrm.iptv.beanfield.com
mfe.iptv.beanfield.com
wifi.beanfield.com
*.teams.voip.beanfield.com
mfe.iptv.beanfield.com
*.beanfield.com
*.voip.beanfield.com
fe.iptv.beanfield.com
udrm.iptv.beanfield.com
mfe01.iptv.beanfield.com
mes-mms01.905kingstw01.yyz.beanfield.com
udrm.iptv.beanfield.com
udrm.iptv.beanfield.com
*.teams.voip.beanfield.com
*.teams.voip.beanfield.com
mfe.iptv.beanfield.com
*.lab.voip.beanfield.com
mfe02.iptv.beanfield.com

Certificate

The complete raw certificate details for mes-mms01.905kingstw01.yyz.beanfield.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgISAxWyLlxxltAe2XB1QJffLpfDMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjA2MDMwODE2MTVaFw0yMjA5MDEwODE2MTRaMDMxMTAvBgNVBAMT
KG1lcy1tbXMwMS45MDVraW5nc3R3MDEueXl6LmJlYW5maWVsZC5jb20wggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOSWbBHeAMguJN2nX4cd3oMSrZt1+/
AVOg5UBZjzVaT7NC1bZlPf84RYbMeZfG2hmSXSW+03GlW7EieEk7zdodXTmqlagf
GhrjtYfj+P9QHTV3W0nrVFOaNjhtuhWmdBdZumIoTLtCOaAuJnDHGkjy1KR/0Y2l
jnOaIaiN+VzhmmcVnXrI6imnb9m3kLVPRS4HIEtNdjiBR+yQvckIt+VvdTggBhe8
d/IfVenHUQ4v0uUWFa5nUqL6OW2o354EUTdQ27x6GVEuenbXW8pjyM46oL84yAvV
53ssjCqHDdypXvoujuylLVg65iQI4+KxTbrH+LMPsfRfNtI8K70gsxKBAgMBAAGj
ggJhMIICXTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFDb8aV151pKkr28Z3kJXOWkX
UTBHMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEB
BEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUF
BzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMDMGA1UdEQQsMCqCKG1lcy1tbXMw
MS45MDVraW5nc3R3MDEueXl6LmJlYW5maWVsZC5jb20wTAYDVR0gBEUwQzAIBgZn
gQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s
ZXRzZW5jcnlwdC5vcmcwggECBgorBgEEAdZ5AgQCBIHzBIHwAO4AdQBGpVXrdfqR
IDC1oolp9PN9ESxBdL79SbiFq/L8cP5tRwAAAYEo2dwfAAAEAwBGMEQCIHKD7E58
EoI5JPk0VsiQzU4+wDAWY9H373RN2xpsbVpnAiAvMZ+uY+EhJI2yaJAym9qVuEgS
7mOfCSmfJlIMxVR8RwB1AN+lXqtogk8fbK3uuF9OPlrqzaISpGpejjsSwCBEXCpz
AAABgSjZ3dAAAAQDAEYwRAIgJdFquE1nLNChjYtAskv6uQ7NGT0rUDTCdyEN1lx2
UbsCIF/4xY4PsU8I3lCG6NfyZxPZJXpSaZ1b8jPxWw4HZAqxMA0GCSqGSIb3DQEB
CwUAA4IBAQCnBcKvspWtdXWyqM2OCn2lgmKAVaOMqMfm/llteq8qn4AlkOo6jQOm
hTBAU4292u94Ar2NvwCpWJVFRH9n3KuHRlDfuHpra391FIxiFwFfjcaDV2v67FEU
118GI1nPAu/PSRXfwYGGvkNcVofaNEDd1hczoh1Z/vLGC7MQZWUZScnjnLyLlxci
7PNGTW13vWebOrRLQ5H489QkUNtlGElbkaByGeLem5HaSj/6v2A+uxRXigGCxh2K
WuMWm9aFJkrpiNVSWPX6+beApOQbIPiWVBpAhsYZt9NmzOcxkutVZ65DgXbVqxi9
b8YYQOeC8k6yarD1NfbpMzfWegPGx9OS
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzklmwR3gDILiTdp1+HHd
6DEq2bdfvwFToOVAWY81Wk+zQtW2ZT3/OEWGzHmXxtoZkl0lvtNxpVuxInhJO83a
HV05qpWoHxoa47WH4/j/UB01d1tJ61RTmjY4bboVpnQXWbpiKEy7QjmgLiZwxxpI
8tSkf9GNpY5zmiGojflc4ZpnFZ16yOopp2/Zt5C1T0UuByBLTXY4gUfskL3JCLfl
b3U4IAYXvHfyH1Xpx1EOL9LlFhWuZ1Ki+jltqN+eBFE3UNu8ehlRLnp211vKY8jO
OqC/OMgL1ed7LIwqhw3cqV76Lo7spS1YOuYkCOPisU26x/izD7H0XzbSPCu9ILMS
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268719630804506795553841627481830685841347
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-03 08:16:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-01 08:16:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mes-mms01.905kingstw01.yyz.beanfield.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26041286394597832078974203349877513912055228637067872634015090618525288524853419337936866214550607641270694024302638784551664716104620093571414355733093308392597724927661257800177399349047879741371567145083335746339332248703342552029438596462052817870699963227432486835962982466359459533573309589035768131869489577134004650630582299459680116170354721160120309579481865659213816116449558122674950215916688221564148590056612052921714746038533010101157240064160773829061387506294279239968080695635379563168265708060404100119814169206909189740026779625156650393293479116421716347675080187609998700342515162520699406586497
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							36fc695d79d692a4af6f19de4257396917513047
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mes-mms01.905kingstw01.yyz.beanfield.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000018128d9dc1f000004030046304402207283ec4e7c12823924f93456c890cd4e3ec0301663d1f7ef744ddb1a6c6d5a6702202f319fae63e121248db26890329bda95b84812ee639f09299f26520cc5547c47007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000018128d9ddd00000040300463044022025d16ab84d672cd0a18d8b40b24bfab90ecd193d2b5034c277210dd65c7651bb02205ff8c58e0fb14f08de5086e8d7f26713d9257a52699d5bf233f15b0e07640ab1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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