3dkinobitola.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:9a:1e:0b:3f:4a:da:74:a1:69:99:85:d3:aa:59:37:51:47 was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=3dkinobitola.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9a:1e:0b:3f:4a:da:74:a1:69:99:85:d3:aa:59:37:51:47
Serial Number (int): 400892563471726799105042216164997018898759
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b9:f0:ba:23:e1:c6:8d:2a:60:6e:e8:2c:3e:07:ba:2f:d9:53:a6:e3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): db:25:0a:f4:6b:db:ef:9a:e0:88:0d:e2:23:cb:77:5a:33:61:1f:1d
Fingerprint (sha256): 35:0a:40:d3:9a:61:46:62:2d:19:a6:e8:64:10:e8:14:a6:e1:e8:71:6c:81:2b:20:03:ab:71:b4:af:00:4a:16

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 3dkinobitola.com

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 3dkinobitola.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3dkinobitola.com
3dkinobitola.nova1cloud.com
kapri.com.mk
kapri.nova1cloud.com
mail.3dkinobitola.com
mail.kapri.com.mk
mail.zavodgovorbitola.mk
www.3dkinobitola.com
www.3dkinobitola.nova1cloud.com
www.kapri.com.mk
www.kapri.nova1cloud.com
www.zavodgovorbitola-mk.nova1cloud.com
www.zavodgovorbitola.mk
zavodgovorbitola-mk.nova1cloud.com
zavodgovorbitola.mk

Other certificates including the domain name 3dkinobitola.com

(limited to 100 certificates)
3dkinobitola.com
personalfinancegame.com
dimitrovski.mk
3dkinobitola.com
advancepedia.com
cbcivet.mk
ymca.mk
festivalofworldmusic.com
3dkinobitola.com
ilindenskidenovi.com
creativecrew.mk

Certificate

The complete raw certificate details for 3dkinobitola.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGvzCCBaegAwIBAgISBJoeCz9K2nShaZmF06pZN1FHMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMDcwOTE4MDFaFw0x
OTA0MDcwOTE4MDFaMBsxGTAXBgNVBAMTEDNka2lub2JpdG9sYS5jb20wggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrCIAWD1Ojex2tIGJ33an3aUw+NQon
4qplYyIs9YS02Trvn0mHtjD6tlwVEqKtUMJdqaG58jWxHaxE9D3pU7h568ks1lt0
JnoTsW6OVlSBDq8VtGG5tJh50E1Ifz6fCo3q4Ktrf6GqlkQT7N9neeZa2ZGVwOAq
+/wIQkwnN34rqOT0tc4z0vbQcaU58qyd82VCIzhBvQ0NGaAK0JhhOZ7b4BdsZMEM
/7uhXZvDF4LkF/HxUO1LkScA3Xbg76ueH/vT/IQ6KSdFlEjtes7MjE+nC0xIdDMq
wcjiVWYvEGzHG6xggq/mgu1DTL04Ff7x/hVXiHLDRopYn5OvRBIsFMs9AgMBAAGj
ggPMMIIDyDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFLnwuiPhxo0qYG7oLD4Hui/Z
U6bjMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEB
BGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0
Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0
Lm9yZy8wggGBBgNVHREEggF4MIIBdIIQM2RraW5vYml0b2xhLmNvbYIbM2RraW5v
Yml0b2xhLm5vdmExY2xvdWQuY29tggxrYXByaS5jb20ubWuCFGthcHJpLm5vdmEx
Y2xvdWQuY29tghVtYWlsLjNka2lub2JpdG9sYS5jb22CEW1haWwua2FwcmkuY29t
Lm1rghhtYWlsLnphdm9kZ292b3JiaXRvbGEubWuCFHd3dy4zZGtpbm9iaXRvbGEu
Y29tgh93d3cuM2RraW5vYml0b2xhLm5vdmExY2xvdWQuY29tghB3d3cua2Fwcmku
Y29tLm1rghh3d3cua2Fwcmkubm92YTFjbG91ZC5jb22CJnd3dy56YXZvZGdvdm9y
Yml0b2xhLW1rLm5vdmExY2xvdWQuY29tghd3d3cuemF2b2Rnb3ZvcmJpdG9sYS5t
a4IiemF2b2Rnb3ZvcmJpdG9sYS1tay5ub3ZhMWNsb3VkLmNvbYITemF2b2Rnb3Zv
cmJpdG9sYS5tazBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAo
MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisG
AQQB1nkCBAIEgfQEgfEA7wB1AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQ
e8xWAAABaCfRtJQAAAQDAEYwRAIgXImWlfe5S8Vhyx7Y4C7x+ERlepiug2uEoEmb
tWOoD+cCIAuazjK28VKycmA6vQTrzYp+vsQvuPlZg+k4vA35rUWiAHYAKTxRllTI
OWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFoJ9G0hgAABAMARzBFAiBuAyKV
vQKH4x/zb+Hoddwda9O7M+mgAyRWtebL8XXCbgIhAJ+6GiBw85nz9uI5uHmHi+Zs
RwnMsYnSNpNCTeI0PwKHMA0GCSqGSIb3DQEBCwUAA4IBAQAcLp9/Fj7KMPB0NfFP
pYYYhT3q4+DY85t8qjv2m1Hioiruh2NJSz0RW1mX2A1aXklrNNcf/Dbu8sOcVid7
eNJ9erXRGwKbqxIOdGSU4+fMnjSw9DFF4NQVxO6DC5DPrTlhbWApQi2mkyunfkm6
dBsJH6RIkpJzT9eeZ/mbzFfnzIXeVzaZnTNIIbg1unSHTYLfmdCM4URfWhw0Ptt2
r24gK5W2nMdLZ+T3+IFkxxv4F5wcZe8s5bm60n8Jcq9DIU2NHjsmE6Emrm5/dMAh
BpGBYSR7DmssWRleglRCGZf8V6zjzLWL6WCrCwkZUIY8N2fC4dja/aHz+5e3f6k9
9JBq
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwiAFg9To3sdrSBid92p
92lMPjUKJ+KqZWMiLPWEtNk6759Jh7Yw+rZcFRKirVDCXamhufI1sR2sRPQ96VO4
eevJLNZbdCZ6E7FujlZUgQ6vFbRhubSYedBNSH8+nwqN6uCra3+hqpZEE+zfZ3nm
WtmRlcDgKvv8CEJMJzd+K6jk9LXOM9L20HGlOfKsnfNlQiM4Qb0NDRmgCtCYYTme
2+AXbGTBDP+7oV2bwxeC5Bfx8VDtS5EnAN124O+rnh/70/yEOiknRZRI7XrOzIxP
pwtMSHQzKsHI4lVmLxBsxxusYIKv5oLtQ0y9OBX+8f4VV4hyw0aKWJ+Tr0QSLBTL
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 400892563471726799105042216164997018898759
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-07 09:18:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-07 09:18:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3dkinobitola.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21590941821402650704255718218464086841903696234331489587888567990665721076039375726043725246724069250041560844005320051093948968551193620519538186283783362802399550199086199835379110023969770816001995790289365635997914263121372811878169295362076527668751660537297517012350285530466416333099673204818607387676044278091479863899783508377756138749402100777352299803841227452752468252303562330160776585478806184676281415568020694254243859429402859492839049353649333130711828762447095031637841780519310983921165605342053342947099962676428531382926205155927184509899072102104801339965337380272646702427360472038790913116989
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b9f0ba23e1c68d2a606ee82c3e07ba2fd953a6e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (376 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dkinobitola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dkinobitola.nova1cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kapri.com.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kapri.nova1cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.3dkinobitola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kapri.com.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.zavodgovorbitola.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.3dkinobitola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.3dkinobitola.nova1cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kapri.com.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kapri.nova1cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zavodgovorbitola-mk.nova1cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zavodgovorbitola.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zavodgovorbitola-mk.nova1cloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zavodgovorbitola.mk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016827d1b494000004030046304402205c899695f7b94bc561cb1ed8e02ef1f844657a98ae836b84a0499bb563a80fe702200b9ace32b6f152b272603abd04ebcd8a7ebec42fb8f95983e938bc0df9ad45a2007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016827d1b486000004030047304502206e032295bd0287e31ff36fe1e875dc1d6bd3bb33e9a0032456b5e6cbf175c26e0221009fba1a2070f399f3f6e239b879878be66c4709ccb189d23693424de2343f0287
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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