www.sportsground.com

Issued by R3

About this certificate

This digital certificate with serial number 03:77:c9:c1:97:28:03:bb:b2:1d:5d:6d:37:d3:5a:45:37:ac was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.sportsground.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:77:c9:c1:97:28:03:bb:b2:1d:5d:6d:37:d3:5a:45:37:ac
Serial Number (int): 302098639465133014421452709514858144806828
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 28:3d:fc:e8:99:fd:83:e4:9c:37:bc:77:98:2c:14:fd:f3:fa:08:9a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c2:92:20:18:2b:9b:0a:88:81:d0:b9:86:c6:3f:a4:5a:e7:03:b9:57
Fingerprint (sha256): 23:80:4b:d6:7f:29:3a:09:53:f2:af:bb:07:42:82:84:b5:c3:28:47:7d:fc:b7:01:f1:53:26:6b:83:d1:e3:ed

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.sportsground.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sportsground.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

id.idme.co.nz
international.freyberg.ac.nz
library.freyberg.ac.nz
www.ams.school.nz
www.athleticsotago.co.nz
www.aucklandswords.org.nz
www.canoepolohb.co.nz
www.chbc.school.nz
www.courtinthebay.co.nz
www.cricketwellington.co.nz
www.fdmc.school.nz
www.freyberg.ac.nz
www.giafc.co.nz
www.gijfc.co.nz
www.haumoana.school.nz
www.hockeywanganui.org.nz
www.howicksoftball.co.nz
www.kartsport.org.nz
www.kirweenetball.co.nz
www.kiwitagnz.co.nz
www.kuranuicollege.school.nz
www.leamingtonrugby.co.nz
www.lindisfarne.school.nz
www.lrsc.co.nz
www.mahe.kiwi
www.malvernnetball.co.nz
www.manawatusoftball.org.nz
www.mca.org.nz
www.mcnetball.co.nz
www.mitre10park.co.nz
www.mmc.school.nz
www.netballchristchurch.org.nz
www.nzbsa.org.nz
www.omuafc.org.nz
www.ourfc.co.nz
www.oxfordcres.school.nz
www.pbhockey.co.nz
www.polo.org.nz
www.porthillunited.co.nz
www.rotoruaunited.co.nz
www.shirleyrugby.co.nz
www.sked.co.nz
www.skeggsfoundation.nz
www.softballwaikato.co.nz
www.softballwaikato.org.nz
www.sportsground.com
www.sportycrm.co.nz
www.sportycrm.com
www.supercrm.co.nz
www.unimountbohs.org.nz
www.wellsfordsquashclub.co.nz

Other certificates including the domain name sportsground.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.sportsground.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNTFZxcyUMTz+MiTF5DC
g7CfYF2+mSgqdTdnbpQqfTrEbJLeqZfJFfHORnCtzBYIxDJpoaHzJrJYNOoPCOmb
pbohcr1hldMiRRrcpka8URbF/cIlV2Zjlgd/8ITBTUEMP0o9Y0NBvXhShtlbLlkm
CzI2A7PEjuiN0gN7XhbKpwdjxMwa70TjJIGKwUKy29CRpPm45pCp2NEkjNBQyIjK
eeZCIxrrXl9PHc8Gd/X7X+2rOl/3lJ3fQCldFP/kq+OgM4nwCnum7xUFpl7XxVtl
hugafPsNwyAT6/x/qSxqlYwCQJIYnVQwywHQBhn29Delpk6cJJeWH4LM7WWBJyrG
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302098639465133014421452709514858144806828
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-08 23:15:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-07 23:15:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sportsground.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23332769455751116126563704940247281181551637131970061863980105372080674148128486188688722203339621011122272039936743934736428555586615584375062600692884115563491440544129056627160322207511993040181626419918082645576408264000489159660597634640817502575917185704937888911706787957594000799522575441790088553113357863338326297918307905039213677163857978348350478565916920585439305583473564782636763122510685320867501852102404705283640625908176029642145020557361789684222111252101800317904784048092688815621366994261509626826379918405077744456203225881987026340792508765483553957198747533131593678783917344067940642375193
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							283dfce899fd83e49c37bc77982c14fdf3fa089a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1168 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.idme.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'international.freyberg.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'library.freyberg.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ams.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athleticsotago.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandswords.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canoepolohb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chbc.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.courtinthebay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cricketwellington.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fdmc.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freyberg.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gijfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haumoana.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeywanganui.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howicksoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kartsport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kirweenetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiwitagnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kuranuicollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leamingtonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lindisfarne.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lrsc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahe.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.malvernnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manawatusoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mca.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mitre10park.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmc.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballchristchurch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzbsa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omuafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oxfordcres.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pbhockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.polo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.porthillunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rotoruaunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shirleyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sked.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skeggsfoundation.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.softballwaikato.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.softballwaikato.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportycrm.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportycrm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supercrm.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unimountbohs.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellsfordsquashclub.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ceb92b401000004030046304402205c20260cbfa9fe32fc706334f9fb00f3a6c36f0c005d0bb71a69334b39872bf4022040abfa6019f52260f7b8bcabf9e948af54be413b23d7ad687c81f9df25cf1e9e00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ceb92b49e000004030047304502202f41e421667b17621736a996bba29a6144c57658f31a1102972b19bc7a5aec81022100b8f90d9cfe0c51fcd03e621e70145984fba01998346d0af77d2f5ccf13879466
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007259da49347aa3da13c34253f2d54201a525ae512fdd212c2b4407df4e6d7ecf0f9946b832614b6f557c746d11484259bca487dc324498fb9e1c1d0c681092aa3a9c08a419acdd8fd932cc816fe2d688604d41cf9d5830a3a33c30ebf1d4bd72ef61f21c8060b9dfaa8e7c239e2c9d30e972964de4f0968b712f97f093661268daccffddf78f068576d34bd6618b38b2389f2abdc15e6effccac19f81cf0ec52a569d8e416ba002a559ffb4ff5b3a6d14c89d730b6117cd63a6dbf7a24a44da57753a3929a1df9d9f210cd05f8258b9636c202ed9a904c86e65e362a8a4ffd2b4d24de32f0d961a409073b7a2aac1cb960edbd7d37f661a4fb50bcfe0a19681b