blps.lex3.org

Issued by R3

About this certificate

This digital certificate with serial number 04:0c:0d:b5:41:3a:0b:0d:e2:2b:fc:e7:99:f7:23:65:e0:94 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=blps.lex3.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0c:0d:b5:41:3a:0b:0d:e2:2b:fc:e7:99:f7:23:65:e0:94
Serial Number (int): 352550753222724125640600464561276463734932
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: dd:0b:ba:9b:89:30:b4:78:f0:9c:02:54:70:1b:66:0f:a5:94:0e:b6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7c:72:73:8b:6d:cb:b0:0f:02:fa:57:a3:5f:e7:b5:7a:d8:61:c8:87
Fingerprint (sha256): 2f:b4:2d:8b:f9:79:86:ef:c6:b3:b9:21:fd:85:0e:f1:9f:a7:07:30:3f:d5:19:54:36:f7:50:04:80:8b:19:3f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate blps.lex3.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blps.lex3.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blps.lex3.org

Other certificates including the domain name lex3.org

(limited to 100 certificates)
athletics.godleyisd.net
admin.dover.k12.nh.us
dkies.org
bce.slvusd.org
www.hoganprep.net
www.kipling.edu.mx
admin.ardreykellhighschool.wearecms.com
ges.dover.k12.nh.us
wvsd208.org
www.dover.k12.ok.us
www.leavittms.net
admin.dekalbcentral.net
jacksoncoschools.com
ylms.org
admin.union.kyschools.us
admin.aplusarts.com
mtpcsd.org
www.ms.wvsd208.org
firstodessaacademy.com
dms.dover.k12.nh.us
www.mv.wvsd208.org
admin.fuesd.org
ess.lex3.org
admin.jchs.jacksoncoschools.com
cw.wvsd208.org
cscisd.net
admin.dkies.org
cm.dekalbcentral.net
admin.todd.kyschools.us
blps.lex3.org
smartfusion.lex3.org
tbjelc.henderson.kyschools.us
ae.gonzalesusd.net
sses.rcsnc.org
www.glendorahigh.net
www.bufordsa.org
admin.ae.gonzalesusd.net
admin.wps.dover.k12.nh.us
www.leavittms.net
mariegdavis.wearecms.com
smartfusion.lex3.org
www.jonescollegeprep.org
mhs.mayfield.kyschools.us
wheces.org
admin.olneycharter.org
admin.llc.lex3.org
admin.aplusarts.com
glendorahigh.net
admin.eastview.gcschools.net
admin.saintpiusx.com
cecvac.com
jonescollegeprep.org
slvusd.org
www.todd.kyschools.us
lex3.org
admin.sle.slvusd.org
enrich.lex3.org
mes.mayfield.kyschools.us
bufordsa.org
admin.bayouacademy.net
www.colegiosmadison.edu.mx
charter.slvusd.org
www.whitesburgchristianacademy.org
admin.athletics.godleyisd.net
admin.bhs.ballingerisd.net
hs.wvsd208.org
admin.blms.lex3.org
www.bayouacademy.net
ms.wvsd208.org
admin.smithfieldelementaryschool.wearecms.com
admin.ges.dover.k12.nh.us
wh.wvsd208.org
salem.mtpcsd.org
hoganprep.net
admin.bles.lex3.org
www.richardallenschools.com
admin.bles.lex3.org
admin.rapk3.richardallenschools.com
admin.bles.lex3.org
enrich.lex3.org
www.yeshivatnoam.org
admin.bellamy.dover.k12.nh.us
mdcoa.org
admin.mes.mayfield.kyschools.us
www.union.kyschools.us
lex3.org
admin.eastmecklenburghighschool.wearecms.com
ess.lex3.org
kiwedin.adsb.on.ca
admin.westcharlottehighschool.wearecms.com
glendorahigh.net
hs.cscisd.net
jh.wvsd208.org
pantojacharter.org
admin.ctc.dover.k12.nh.us
admin.jacksoncoschools.com
lex3.org
admin.ghs.gonzalesusd.net
admin.athletics.godleyisd.net
admin.aes.pgsd.ms

Certificate

The complete raw certificate details for blps.lex3.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF5zCCBM+gAwIBAgISBAwNtUE6Cw3iK/znmfcjZeCUMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMjcwMTQyMjBaFw0yNDAzMjYwMTQyMTlaMBgxFjAUBgNVBAMT
DWJscHMubGV4My5vcmcwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDP
a0XUh7zMc/C1AhqLuBI4nLSWkKxvZf8YxqK6zLJEwb5M1YTPWMEJAwR39SLHef0R
BtqEeek3ChEa+AuVWo9UiX4bX0IG2is8PBzxqsqZhhxtKOIJW6brryBTy/ZkXbC/
V4mNN+ZptJgQKGh+r3tc/Q+lfgCJ3xV56ggwxtO2WoDEwUIl59OHWU8/erBnXVHh
BR9QQmUttTouoqKHEPz1XZD+sjY42NPhB2vIM2WKSpCIyO9Atxos18EO5hmu7/Cs
07KBLc9DC0Qba9DDcwLHLGWnDxW5neFQEU2QDFKTnAxB1Pq4gwM4NOnx6+cX9EtR
sgDhk4P4unIsHwI9I3ZBgWOIo3xHNq48fiZ1OsM92a/IMsfD92hjzNjZojqnxYyr
DIKPSwqUc1Nvftli1CW6S7rR5o8L+5cgf0aRCXxYVy9THZeqodNiqryLnMvTOwjN
kEJi2SmxQ1/J3cLEu5OVal74Cnnbn9sJmEmPUQ3aiRV8dLEOytDsA95CmPYGU2Kl
2Wc3Tgp8AOLxYxcXL4ILxLE2mtX1SzGljpaB9kGjZNRRtJkiKsE5L0HvknCHhI4E
Hb7NDdOFUisugkMy7ZUqVSvk5Jc42Fv+j7uloBrL2XmBqhp1x5OFgTIUqj3AmYVB
jtkeR/ft+nrOqleVTypsdoskgA7XXzrfDlEgrqEJ5QIDAQABo4ICDzCCAgswDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV
HRMBAf8EAjAAMB0GA1UdDgQWBBTdC7qbiTC0ePCcAlRwG2YPpZQOtjAfBgNVHSME
GDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYB
BQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDov
L3IzLmkubGVuY3Iub3JnLzAYBgNVHREEETAPgg1ibHBzLmxleDMub3JnMBMGA1Ud
IAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYASLDja9qm
RzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGMqSbIDQAABAMARzBFAiAJTS0t
p4a1TPWHbtB+fOFBDymt83NNRhzu5bW3crmi1QIhAKrqKHKFXvmmjNFByO4IvX9O
ciW+ZKUp0bAmXkQmB8/gAHYAouK/1h7eLy8HoNZObTen3GVDsMa1LqLat4r4mm31
F9gAAAGMqSbIDQAABAMARzBFAiEAhqRHhd89CPwXRp1+LiOmCVt26QGQspRqLDG+
fOdT3eYCIBm4AYAl3UjdnLpnqPzlQ/NNvUWQwX29zDMZgGOpfjbKMA0GCSqGSIb3
DQEBCwUAA4IBAQCLpdUhoywkJKEFkZU0EVEcrJt1kt/7jNGd7OKwLDTIIJiuZrCu
wQeqpfKOz4XUY/G2Sm5nCCDzTaOKf7tveWCSRFQjiIx8TcpYkO8KAItUnrBivTT3
R2O7FtHMHYfHy8hUB3RXJVfO+c/QeePrwbCFHvVzUXaw5mcOF0ZB1uvy+QzqhzWF
/WEsWD3WheNoF3SL4EPgXF/6j3UZa9guN+Cy1YUEBjrv693YcgXvoXhnXP63tCHM
yltN3yjbAPLXqgw0aBpz+NIZFZOltDduKzE54g9tmmIGWBHrdbHbscnsqI8JFcCo
o7QY1wd5pUIZlzP9/pOGOqBqb5rCuYoUMtY/
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAz2tF1Ie8zHPwtQIai7gS
OJy0lpCsb2X/GMaiusyyRMG+TNWEz1jBCQMEd/Uix3n9EQbahHnpNwoRGvgLlVqP
VIl+G19CBtorPDwc8arKmYYcbSjiCVum668gU8v2ZF2wv1eJjTfmabSYEChofq97
XP0PpX4Aid8VeeoIMMbTtlqAxMFCJefTh1lPP3qwZ11R4QUfUEJlLbU6LqKihxD8
9V2Q/rI2ONjT4QdryDNlikqQiMjvQLcaLNfBDuYZru/wrNOygS3PQwtEG2vQw3MC
xyxlpw8VuZ3hUBFNkAxSk5wMQdT6uIMDODTp8evnF/RLUbIA4ZOD+LpyLB8CPSN2
QYFjiKN8RzauPH4mdTrDPdmvyDLHw/doY8zY2aI6p8WMqwyCj0sKlHNTb37ZYtQl
uku60eaPC/uXIH9GkQl8WFcvUx2XqqHTYqq8i5zL0zsIzZBCYtkpsUNfyd3CxLuT
lWpe+Ap525/bCZhJj1EN2okVfHSxDsrQ7APeQpj2BlNipdlnN04KfADi8WMXFy+C
C8SxNprV9UsxpY6WgfZBo2TUUbSZIirBOS9B75Jwh4SOBB2+zQ3ThVIrLoJDMu2V
KlUr5OSXONhb/o+7paAay9l5gaoadceThYEyFKo9wJmFQY7ZHkf37fp6zqpXlU8q
bHaLJIAO11863w5RIK6hCeUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 352550753222724125640600464561276463734932
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-27 01:42:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-26 01:42:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blps.lex3.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 846195832771341542819936753476189814111749916834535996109864712706833262593176928496339988292554796333097757188802337994145555837189755149159253878350754663925863058735453789688924430273403763992341599918456163514319884984723758580691800790277530216857014278267698334395310873478098039517603702015029792710356759162352832841551932340349981510741914870867897089860447612017390828958356272522681703966009765030947535987775687868151088653517010601569176539934732497928545763642567969791385261003623683900136020624071988626327885970623529957900156241764295676372510762201684816548470682819516356876879560974378071230499072245386585009399847777679441526674435572767313792628845108362036461481730195241902071427765890454954932201469045777055798651657791927438384438918487268694877210823769150743345421061183011313190716797426839989933374916635243506456344195376444152174286813678446956022313651371521672525983835834796345353416217746419364486362607082491178085754236326063162402634802035699574159215123178727165114582341911032251097118069505759125359646071632205976158445540676981667238267224384560382829091360665748662031755152390204670899273283670121343089963471396171267793046108235670507579334517391814754137862741357460126314994403813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dd0bba9b8930b478f09c0254701b660fa5940eb6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blps.lex3.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ca926c80d00000403004730450220094d2d2da786b54cf5876ed07e7ce1410f29adf3734d461ceee5b5b772b9a2d5022100aaea2872855ef9a68cd141c8ee08bd7f4e7225be64a529d1b0265e442607cfe0007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018ca926c80d000004030047304502210086a44785df3d08fc17469d7e2e23a6095b76e90190b2946a2c31be7ce753dde6022019b8018025dd48dd9cba67a8fce543f34dbd4590c17dbdcc33198063a97e36ca
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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