platform.sparkinfluence.net

Issued by R3

About this certificate

This digital certificate with serial number 03:98:d7:dd:c5:a5:20:cd:db:42:d4:e4:52:4f:0c:6c:b6:2f was issued on by Let's Encrypt.

With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=platform.sparkinfluence.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:98:d7:dd:c5:a5:20:cd:db:42:d4:e4:52:4f:0c:6c:b6:2f
Serial Number (int): 313346713092680370615655941190646376478255
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2e:1b:10:d3:a9:5e:d6:43:67:35:cc:33:95:79:04:f6:df:81:33:fe
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 72:8e:1f:e3:8b:d7:b2:bd:f0:c0:d5:79:c9:b6:7c:33:1b:91:b1:f2
Fingerprint (sha256): 34:3e:2b:60:6f:c5:46:39:ac:f9:05:e7:02:c4:9e:d8:43:47:bd:b4:9f:cd:73:f9:ab:fe:65:11:0a:14:08:98

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate platform.sparkinfluence.net

38

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for platform.sparkinfluence.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

act.physiciansgrassrootsnetwork.org
action.appfairness.org
action.blochforirving.com
action.cancersupportcommunity.org
action.lungevity.org
action.nearbycare.org
action.openplans.org
action.orpca.org
action.peopleforbikes.org
action.progresschamber.org
action.ridersalliance.org
action.vinylsiding.org
action.williams.com
advocacy.chcanys.org
advocacy.kidney.org
advocacy.massmutual.com
fccactioncenter.com
givetoadpac.ada.org
groundswellstrat.com
investwanow.org
magna.action.magnasvoice.com
makeurvoiceheard.com
platform.sparkinfluence.net
savehealthcareinwa.org
spark.savebostonswaterfront.com
usgr.smiths.com
voices.kidney.org
www.aahoa-pac.com
www.autocareadvocacy.org
www.boatingunited.org
www.fccactioncenter.com
www.investwanow.org
www.magnasvoice.com
www.makeurvoiceheard.com
www.ridapac.org
www.savehealthcareinwa.org
www.spiritsunited.org
www.wateraccessproject.com

Other certificates including the domain name sparkinfluence.net

(limited to 100 certificates)
platform.sparkinfluence.net
platform.sparkinfluence.net
oivi.sparkinfluence.net
peopleforbikes.org
mps.sparkinfluence.net
asn.sparkinfluence.net
oivi.sparkinfluence.net
platform.sparkinfluence.net
mps.sparkinfluence.net
dev.sparkinfluence.net
platform.sparkinfluence.net
platform.sparkinfluence.net
peopleforbikes.org
oivi.sparkinfluence.net
terminal-demo.sparkinfluence.net
oivi.sparkinfluence.net
asn.sparkinfluence.net
*.sparkinfluence.net
sparkinfluence.net
sparkinfluence.net
mps.sparkinfluence.net
pmiusa.sparkinfluence.net
oivi.sparkinfluence.net
*.sparkinfluence.net
platform.sparkinfluence.net
*.sandbox.sparkinfluence.net
pmiusa.sparkinfluence.net
*.sparkinfluence.net
oivi.sparkinfluence.net
oivi.sparkinfluence.net
dev.sparkinfluence.net
alpapac.sparkinfluence.net
asn.sparkinfluence.net
mps.sparkinfluence.net
dev.sparkinfluence.net
*.sparkinfluence.net
platform.sparkinfluence.net
peopleforbikes.org
platform.sparkinfluence.net
platform.sparkinfluence.net
default.sparkinfluence.net
peopleforbikes.org
default.sparkinfluence.net
pmiusa.sparkinfluence.net
platform.sparkinfluence.net
*.sandbox.sparkinfluence.net
*.sparkinfluence.net
pmiusa.sparkinfluence.net
platform.sparkinfluence.net
kb.sparkinfluence.net
oivi.sparkinfluence.net
mps.sparkinfluence.net
peopleforbikes.org
asn.sparkinfluence.net
peopleforbikes.org
dev.sparkinfluence.net
peopleforbikes.org
dev.sparkinfluence.net
mps.sparkinfluence.net
mps.sparkinfluence.net
dev.sparkinfluence.net
staging.mailer.sparkinfluence.net
asn.sparkinfluence.net
oivi.sparkinfluence.net
default.sparkinfluence.net
platform.sparkinfluence.net
oivi.sparkinfluence.net
*.sparkinfluence.net
*.sparkinfluence.net
platform.sparkinfluence.net
mps.sparkinfluence.net
sparkinfluence.net
oivi.sparkinfluence.net
platform.sparkinfluence.net
platform.sparkinfluence.net
default.sparkinfluence.net
dev.sparkinfluence.net
peopleforbikes.org
*.sparkinfluence.net
*.app.sparkinfluence.net
oivi.sparkinfluence.net
sparkinfluence.net
pmiusa.sparkinfluence.net
platform.sparkinfluence.net
platform.sparkinfluence.net
sparkinfluence.net
dev.sparkinfluence.net
dev.sparkinfluence.net
mps.sparkinfluence.net
oivi.sparkinfluence.net
asn.sparkinfluence.net
features.sparkinfluence.net
asn.sparkinfluence.net
default.sparkinfluence.net
default.sparkinfluence.net
platform.sparkinfluence.net
pmiusa.sparkinfluence.net
pmiusa.sparkinfluence.net
dev.sparkinfluence.net
peopleforbikes.org

Certificate

The complete raw certificate details for platform.sparkinfluence.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhTX//BaxKkb0W/F9iU3
JT7h8Wqcr+XOWaYUMltZS5o41HF885lN1MhgwYjwSqFCYr0pxE3Pd3T9+GbFmlml
Au/lOhc8kiGfwolOEt07Bns7gk6vbbXbXH5oP/yM1KqtApa6Ji5Tinhw1AAxCroL
Eatz9gJ3yLabxo6+KAo46Q2hDq5lhyC8aODavsnEtk6JM8ZrZcf0F9HvKd+v5PwW
gjkpss0KnPo3i5p+2l/vloxPBRiS73WkdsCojEq3FrEsAcQ2WHrZM3OViqPoHeaI
C26GWwYCtH7A24LHajddMlUWyKigJUKDraw5eJKv11mkVyAVJjgjTQ14stKjwp8y
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313346713092680370615655941190646376478255
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-10 13:19:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-08 13:19:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'platform.sparkinfluence.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19955930620384972972870732986674692863771873594163188326332268269690683748125585642176239811738307639144106118772219951965523961323580843278430032440197072608461312473219095618201360093865110682824881841557561501315374833050475446150094798227810236540407331522325855925680500003337625162303680438083842942685901489426609218017529707799843455735550219681202575009884859890809000454760313737784964362180719873400655510293719907854497398824023331112066757407227923387816199073557724537446174700667589455840782234798593812028944338453450124174299261891607948524049400251835491297180587378888639108881514745568602089271931
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e1b10d3a95ed6436735cc33957904f6df8133fe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (919 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.physiciansgrassrootsnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.appfairness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.blochforirving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.cancersupportcommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.lungevity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.nearbycare.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.openplans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.orpca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.peopleforbikes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.progresschamber.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.ridersalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.vinylsiding.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.williams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advocacy.chcanys.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advocacy.kidney.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advocacy.massmutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fccactioncenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givetoadpac.ada.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groundswellstrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investwanow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magna.action.magnasvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makeurvoiceheard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platform.sparkinfluence.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savehealthcareinwa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spark.savebostonswaterfront.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usgr.smiths.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voices.kidney.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aahoa-pac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autocareadvocacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boatingunited.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fccactioncenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investwanow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magnasvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makeurvoiceheard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ridapac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.savehealthcareinwa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiritsunited.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wateraccessproject.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189402c3104000004030047304502200af096521f176a27c90d6a9027b2e8c7050d73004f1b44276632e653cb7c5679022100efa599126762a6adff32f6079f4914f6aa476581672bc07bc3eec435e4c6227b007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000189402c31040000040300483046022100b04495288261d4f5e0784eae0515f9f997586de117f2bfd539e69605da255676022100a628b6339c1db78ff8d1e04657a1121eb5cbfce924d51486a0351908fbae1024
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006a25392ce307f1a84d5a98b3715173dc128a3b5e4345d51005719ad1df597a9c80980a1c5059536fe98270bd4f36d5b2ac2357f68def1ecea9fe9b83b15b1f6d01dce36d91a31f7435832b17d4a909d2dcf6df1cfe89660cfced7163e995cff3c658e81ef87d2b806ea24d829c89e349e2127d418895b93326471d9113987f64ef3cce22b5e63b0c73b88fc444130b586d30f530662a1c0a33d5589da9e63bb13baba6d4b61ee19aa809694a4460e1a6d3919cc0124ea8c6a5b3e19acefca6f11de11a827c2a9e82c40e510fae83c3583b4d248bc7bd3d050c9994e2a048a8bfca0b0f8d2b09e5782aae2522358050e31a5794033e25eadd67949962fc0da97c