gitlab.mfessolutions.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:58:8c:6c:a8:5a:dc:4a:33:b7:05:d9:f3:88:16:2d:44:46 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gitlab.mfessolutions.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:58:8c:6c:a8:5a:dc:4a:33:b7:05:d9:f3:88:16:2d:44:46
Serial Number (int): 291468362186437459154891713675518647551046
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 41:94:58:fc:1d:96:6e:e3:e6:9e:d3:d9:a7:c2:09:69:18:cb:37:2f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0f:20:16:f2:26:9c:56:05:3c:8e:d0:b0:38:90:70:d5:47:3d:98:34
Fingerprint (sha256): 2c:38:d8:3d:0d:93:16:4e:d0:37:c9:57:83:9a:01:d8:8e:5a:80:9d:fd:7e:5e:d5:1e:29:db:04:56:48:31:bb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gitlab.mfessolutions.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gitlab.mfessolutions.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gitlab.mfessolutions.com

Other certificates including the domain name mfessolutions.com

(limited to 100 certificates)
gitlab.mfessolutions.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
gitlab.mfessolutions.com
task.aasmaasecurities.com
zoho.fourmedia.do
gitlab.mfessolutions.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
gitlab.mfessolutions.com
*.mfessolutions.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
gitlab.mfessolutions.com
gitlab.mfessolutions.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
projects.mfessolutions.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
gitlab.mfessolutions.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
gitlab.mfessolutions.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
gitlab.mfessolutions.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
projects.tollos.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
projects.curocomp.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
task.aasmaasecurities.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com
sni60605.cloudflaressl.com

Certificate

The complete raw certificate details for gitlab.mfessolutions.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgISA1iMbKha3EoztwXZ84gWLURGMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA4MzEwOTM4MTVaFw0x
ODExMjkwOTM4MTVaMCMxITAfBgNVBAMTGGdpdGxhYi5tZmVzc29sdXRpb25zLmNv
bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANIeWskPFW7lnuKiHnU4
fQ5fTWrKKmQOWWYMJFaksZBnyF/xFNnG40y8j5oNSRh5LOAhvphR7M0dSPIGqD/e
yX+ox3W+a9IkP36Ua/nVrqm040EyynFS+2K6qeRynzK5G7REAw7Ok3gttd4lq4m8
vYUGRbLJFGvhNHpgywtDew04RirqsXRvq27ke3XMOizh2TVuEb8HFtpMyAvAfjFv
rgi80sLhfikdXQX/7CbtYTVQxD3QUHTMECHPfSnqeZRXT+qXV/I9Le9sN3ggAyV2
YsKA58lOdpfTcYFvZWxu4xAPQzL0Hl3v9KwFzzRTaWQgtHBmZh9crJCGFzcxx39M
jc0CAwEAAaOCAyAwggMcMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUQZRY/B2WbuPm
ntPZp8IJaRjLNy8wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI
KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0
c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0
c2VuY3J5cHQub3JnLzAjBgNVHREEHDAaghhnaXRsYWIubWZlc3NvbHV0aW9ucy5j
b20wgf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYG
CCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUH
AgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9u
IGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGgg
dGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNy
eXB0Lm9yZy9yZXBvc2l0b3J5LzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB3AFWB
1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAABZY+P4CsAAAQDAEgwRgIh
AKAD4/TKkMtrw0tGLwRyodQMlVMyokXylipPLqnxfnbZAiEAzurxppFP4By1kbbm
3uK9rpq6aqca3CEmgWvBXd1F1eIAdQApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTD
DPTlRUf0eAAAAWWPj+ISAAAEAwBGMEQCIDEuRcKsJfamXzXxFp+IGmPs/OOc6IV3
kffm/FSATaPqAiBRFMon/R7K8q52DwB+yZok/S5+SLj5/yLfhVlp9xrqnTANBgkq
hkiG9w0BAQsFAAOCAQEAVqwvon1lrQb1hC0ZpwUq0fpIUztf1fMo8xS0zk4ZYT5e
JgePAaQl3gvdnirivHPcNS0aR+hraobc8bOO+iyifdDJtpa0mzia0j4ijMhD0tuU
2f/97u2PDIt4HeXEAK1FR4ihCMVO1giNS2wy6G14iV5OeUESVOWuODCgHGSi5eKu
9mZZSAPsrVGMpsqR9zcz+MkZshWTGo8vpE1cn1iKGlPs1xEquDQi2GZqMPx9J7ny
rIxjhdVovQBA21aDYInIEWuIBjdFPx5GacNcJgMGfyJIav4GDfCWvKasHzBkx0Cq
6q6uq3fgYbi022mHRU9EtGObj60JWM7ArIk5/6UJXg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0h5ayQ8VbuWe4qIedTh9
Dl9NasoqZA5ZZgwkVqSxkGfIX/EU2cbjTLyPmg1JGHks4CG+mFHszR1I8gaoP97J
f6jHdb5r0iQ/fpRr+dWuqbTjQTLKcVL7Yrqp5HKfMrkbtEQDDs6TeC213iWriby9
hQZFsskUa+E0emDLC0N7DThGKuqxdG+rbuR7dcw6LOHZNW4RvwcW2kzIC8B+MW+u
CLzSwuF+KR1dBf/sJu1hNVDEPdBQdMwQIc99Kep5lFdP6pdX8j0t72w3eCADJXZi
woDnyU52l9NxgW9lbG7jEA9DMvQeXe/0rAXPNFNpZCC0cGZmH1yskIYXNzHHf0yN
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291468362186437459154891713675518647551046
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-31 09:38:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-29 09:38:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gitlab.mfessolutions.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525012469011155520172067547614755235814322071613984174693156975063632302068535411125930417801408028544184141250556306066115257891893903905077224630478722749067031609692360160705958340438351172071728119860267847233056074899165223150975381402654986350198723420072932450459035135977845655582536050822040639486032150380571119788997229581269259772767044170316491395656337950585958552416152324886920067128326924448929743617862467596679254775523912468742219749382961481811307454972624789205114506324828491560139062637993620314841619569277493389026636845689553380439400896841022126418408874433682792448769891066839036628429
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							419458fc1d966ee3e69ed3d9a7c2096918cb372f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab.mfessolutions.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001658f8fe02b0000040300483046022100a003e3f4ca90cb6bc34b462f0472a1d40c955332a245f2962a4f2ea9f17e76d9022100ceeaf1a6914fe01cb591b6e6dee2bdae9aba6aa71adc2126816bc15ddd45d5e2007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001658f8fe21200000403004630440220312e45c2ac25f6a65f35f1169f881a63ecfce39ce8857791f7e6fc54804da3ea02205114ca27fd1ecaf2ae760f007ec99a24fd2e7e48b8f9ff22df855969f71aea9d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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