getsweatgo.com

Issued by R3

About this certificate

This digital certificate with serial number 03:3c:29:a3:2b:5c:6c:1b:bf:fc:5b:60:83:6d:17:e9:31:53 was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=getsweatgo.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3c:29:a3:2b:5c:6c:1b:bf:fc:5b:60:83:6d:17:e9:31:53
Serial Number (int): 281809145382218232312385825806461912559955
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 29:05:05:91:9b:79:a9:3a:d9:e4:cc:82:1f:02:ad:33:e6:8c:c3:1d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b6:c1:41:09:62:68:fd:7b:6b:5f:cc:30:9e:86:92:83:16:93:a4:37
Fingerprint (sha256): 3a:41:1c:11:e3:b5:35:eb:dc:83:6e:d7:9f:2e:56:f8:aa:5f:55:23:01:57:0a:e4:47:eb:70:1b:74:12:a9:94

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate getsweatgo.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for getsweatgo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

beta1.getsweatgo.com
beta2.getsweatgo.com
beta3.getsweatgo.com
getsweatgo.com
staging.getsweatgo.com
www.getsweatgo.com

Other certificates including the domain name getsweatgo.com

(limited to 100 certificates)
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
getsweatgo.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
getsweatgo.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
getsweatgo.com
sni168682.cloudflaressl.com
getsweatgo.com
getsweatgo.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
tls.automattic.com
getsweatgo.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
getsweatgo.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
tls.automattic.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
getsweatgo.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
getsweatgo.com
sni168682.cloudflaressl.com
getsweatgo.com
getsweatgo.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
tls.automattic.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
tls.automattic.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com
sni168682.cloudflaressl.com

Certificate

The complete raw certificate details for getsweatgo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgISAzwpoytcbBu//Ftgg20X6TFTMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMDEyMDU4MDZaFw0yNDAzMzEyMDU4MDVaMBkxFzAVBgNVBAMT
DmdldHN3ZWF0Z28uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
wMAN9vTUPmV/CuFN77htye9b+D7jQtm8s8y4lC4rfp1zy6N/fQYqNi0sIvKlDBf8
6t705WucvxOoBpaCdy1fe8EfAqjTS6/CRSxLI6uz1AhlyKoRxUpkMER+ga3jyJz0
HiAVQZReusr1lKbt5EzpLw91waT9Igartsb4+TTI5rIHKo79xq1QAthTM8T0j8sY
c27VEorP1B626yHRZbvufpg0dbi6e2CUkJXrS3y/3n42UtItJoOwExPa/tVYAa5w
6GbFx3N3w/lWezoBYRLkkodnJ9IEGodjFC2Ld6UThI3LkOz/gc65IYmWhMCNyH0S
KD6ZR6hjJ77rk81uo+4L4wIDAQABo4ICgDCCAnwwDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud
DgQWBBQpBQWRm3mpOtnkzIIfAq0z5ozDHTAfBgNVHSMEGDAWgBQULrMXt1hWy65Q
CUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9y
My5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3Jn
LzCBiAYDVR0RBIGAMH6CFGJldGExLmdldHN3ZWF0Z28uY29tghRiZXRhMi5nZXRz
d2VhdGdvLmNvbYIUYmV0YTMuZ2V0c3dlYXRnby5jb22CDmdldHN3ZWF0Z28uY29t
ghZzdGFnaW5nLmdldHN3ZWF0Z28uY29tghJ3d3cuZ2V0c3dlYXRnby5jb20wEwYD
VR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgA7U3d1
Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAAAYzHCLlkAAAEAwBHMEUCIBhs
pPhnfsyXc0v5eoNv4jyvMGdTOW61tuajyADB5TzCAiEAgx1WBQfmE7+fsCgEA2c3
yB6I7Wb9IM5G+LCkRduwYIcAdgCi4r/WHt4vLweg1k5tN6fcZUOwxrUuotq3ivia
bfUX2AAAAYzHCLllAAAEAwBHMEUCIQDyx/VMAwobwJvOj/j686bZZeNah75zgWRf
S20mZLgLIQIgJ0YapEnNtW2SxXo+PNYZ1PvRkWEH2j8I/jQEbEuX7/0wDQYJKoZI
hvcNAQELBQADggEBADfCnGmgWUrq99wfH+2DcvC74SB6yzmeMbQCW4hqptyjyr/b
gEYXXi6imWv836pZgC4y6u0Cu684k+aGF+1hGYJgIBRfOuwfCDe84SxDME53/3k+
vDSxXo1duxQMemaMrtn0RPDJ1A5YeviyX7sk9cfX1f/+mb+O7b/H29qmeATSUM7q
wsfzHeHxH4F/btQYnozel/IZooZoSN+QBSmrYXWvk1mXmj46z365isblcXWhuZMV
uYovRnS9mDDbVEdeanDa+ecyl5RDRC9WZMGtCjz0AOAMf+nOb8K1jJiQKYdhjr/5
5ajV4PSbvYCquJgheIdIB0EJks3CRI62Z3FRybQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMAN9vTUPmV/CuFN77ht
ye9b+D7jQtm8s8y4lC4rfp1zy6N/fQYqNi0sIvKlDBf86t705WucvxOoBpaCdy1f
e8EfAqjTS6/CRSxLI6uz1AhlyKoRxUpkMER+ga3jyJz0HiAVQZReusr1lKbt5Ezp
Lw91waT9Igartsb4+TTI5rIHKo79xq1QAthTM8T0j8sYc27VEorP1B626yHRZbvu
fpg0dbi6e2CUkJXrS3y/3n42UtItJoOwExPa/tVYAa5w6GbFx3N3w/lWezoBYRLk
kodnJ9IEGodjFC2Ld6UThI3LkOz/gc65IYmWhMCNyH0SKD6ZR6hjJ77rk81uo+4L
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281809145382218232312385825806461912559955
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 20:58:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-31 20:58:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'getsweatgo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24332460181571297311433619827695105275560609699356154083337286301114137434538839982677056663996366435803221810610107328558317050306113477286454996905131832382515840947998548624062327686549991464737091304955693648936371535410556466137815186560315233800832677670103724493265218037153860128355668667462431372422277940224192715386919601582968611932186645295474636050387386165541944686041359984707282644660549570363555236797742490612596396570078642425054479547697768380351455726594750874831887084144637507205507886841822208030246593621507222520656549800433715078759548242406948599362479030883664733615803004970996320832483
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							290505919b79a93ad9e4cc821f02ad33e68cc31d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta1.getsweatgo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta2.getsweatgo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta3.getsweatgo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getsweatgo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.getsweatgo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getsweatgo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cc708b96400000403004730450220186ca4f8677ecc97734bf97a836fe23caf306753396eb5b6e6a3c800c1e53cc2022100831d560507e613bf9fb02804036737c81e88ed66fd20ce46f8b0a445dbb06087007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018cc708b9650000040300473045022100f2c7f54c030a1bc09bce8ff8faf3a6d965e35a87be7381645f4b6d2664b80b21022027461aa449cdb56d92c57a3e3cd619d4fbd1916107da3f08fe34046c4b97effd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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