kinepolis.lu

Issued by R3

About this certificate

This digital certificate with serial number 03:00:d2:94:ce:f5:64:ee:82:6f:2b:bb:e3:4d:b3:9b:56:0e was issued on by Let's Encrypt.

With 31 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kinepolis.lu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:00:d2:94:ce:f5:64:ee:82:6f:2b:bb:e3:4d:b3:9b:56:0e
Serial Number (int): 261616768331949150437194976063404453352974
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 91:f3:43:12:d3:44:22:d9:0f:14:41:d6:26:72:7e:57:7d:0b:5e:57
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 72:16:57:aa:b5:08:f2:c5:e5:f0:69:12:dc:bd:b6:7c:86:2c:ca:3b
Fingerprint (sha256): 3e:74:f2:83:b8:f5:af:6c:50:01:b1:3d:84:f1:60:98:9f:88:35:1f:33:fe:08:0f:e5:96:3a:85:e9:19:ae:e1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kinepolis.lu

31

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kinepolis.lu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

atv.brightfish.be
cineramabios.nl
dev.business.kinepolis.lu
fullcinemas.cat
fullcinemas.com
fullcinemas.org
kfd.be
kinepolis.cat
kinepolis.lu
kinepolisluxembourg.lu
klubcinema.fr
magicforest.es
new.cineramabios.nl
prive.fullcinemas.com
privetickets.fullcinemas.com
stage-prive.fullcinemas.com
www.cinemaclub.fr
www.cinemaklub.fr
www.cineramabios.nl
www.clubcinema.fr
www.fullcinemas.cat
www.fullcinemas.com
www.fullcinemas.org
www.greatescape.es
www.greatescape.kinepolis.es
www.kfd.be
www.kinepolis.cat
www.kinepolisluxembourg.lu
www.klubcinema.fr
www.magicforest.es
www.magicforest.kinepolis.es

Other certificates including the domain name kinepolis.lu

(limited to 100 certificates)
kinepolis.lu
kinepolis.lu
shop.kinepolis.be
tickets.kinepolis.be
kinepolis.lu
*.kinepolis.lu
kinepolis.lu
dev.business.kinepolis.lu
business.kinepolis.lu
tickets.kinepolis.be
shop-dev.kinepolis.be
saint-nicolas.kinepolis.lu
kinepolis.lu
kinepolis.lu
shop-dev.kinepolis.fr
shop.kinepolis.be
business.kinepolis.lu
kinepolis.lu
kinepolis.lu
tickets.kinepolis.be
shop.kinepolis.be
kinepolis.megatix.be
kinepolis.lu
shop.kinepolis.be
kinepolis.lu
kinepolis.megatix.be
dev.business.kinepolis.lu
tickets.kinepolis.be
shop-dev.kinepolis.be
shop.kinepolis.be
saint-nicolas.kinepolis.lu
shop-dev.kinepolis.fr
saint-nicolas.kinepolis.lu
dev.business.kinepolis.lu
kinepolis.lu
shop.kinepolis.be
saint-nicolas.kinepolis.lu
stage-kinepolis.megatix.be
kinepolis.lu
kinepolis.lu
shop.kinepolis.be
dev.business.kinepolis.lu
saint-nicolas.kinepolis.lu
shop-dev.kinepolis.fr
shop-dev.kinepolis.fr
shop.kinepolis.be
kinepolis.lu
business.kinepolis.lu
kinepolis.lu
shop.kinepolis.be
shop-dev.kinepolis.be
www.kinepolis.lu
saint-nicolas.kinepolis.lu
kinepolis.lu
dev.business.kinepolis.lu
kinepolis.megatix.be
dev.business.kinepolis.lu
*.kinepolis.lu
business.kinepolis.lu
saint-nicolas.kinepolis.lu
business.kinepolis.lu
kinepolis.megatix.be
saint-nicolas.kinepolis.lu
saint-nicolas.kinepolis.lu
business.kinepolis.lu
dev.business.kinepolis.lu
tickets.kinepolis.be
www.kinepolis.lu
kinepolis.lu
kinepolis.megatix.be
dev.business.kinepolis.lu
shop.kinepolis.be
tickets.kinepolis.be
kinepolis.lu
business.kinepolis.lu
saint-nicolas.kinepolis.lu
shop-dev.kinepolis.be
shop-dev.kinepolis.be
kinepolis.lu
dev.business.kinepolis.lu
kinepolis.lu
www.kinepolis.lu
dev.business.kinepolis.lu
kinepolis.megatix.be
kinepolis.megatix.be
shop-dev.kinepolis.fr
kinepolis.megatix.be
saint-nicolas.kinepolis.lu
kinepolis.lu
shop-dev.kinepolis.be
kinepolis.lu
kinepolis.lu
shop-dev.kinepolis.be
shop-dev.kinepolis.fr
shop-dev.kinepolis.be
kinepolis.megatix.be
business.kinepolis.lu
kinepolis.lu
kinepolis.megatix.be
kinepolis.lu

Certificate

The complete raw certificate details for kinepolis.lu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkoQZJQOjaaH7F4G4oUR
UYHC7NbHmNjA+Jz3oaPrU7ERQrufEm6nZYRtArcH8zgfCrmUuUXTIz/sf8F3ULrp
nKou1lU2O3WyJl6l3nNZozPU9jh3i2rLiW/rbySCK7mkXgfh39god+eQ6mMEadhl
0xrc6s99v/UtDdDQR+dqbzchr8Y6WPdO7+bIX60mjIFXm01Whmr6mjqe1ZzixMiZ
SpAylzpVW0JZuOdHxRZ2Q4vuD8HBlsnG14kSMFz3mFf/TkrHAsGPiOcZ7ZCyB5b7
uIiTjoS7YYhlHElrYhoWebVgnGE0grWpdk3GALP7KyA8BSbJqhW2h/1kwkeWb0ze
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261616768331949150437194976063404453352974
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-24 16:50:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-22 16:50:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kinepolis.lu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22001987400812765894156782085002753149940338481226455322786076786689671096446419755811115916351532472709822168729459661808187163724713456351559756372091158707400401197334427078895873265793615359768600909554914841696413960466044185984169447288110670459434009395870003727317826512012208802948938060006121985226495382056011680024217079529525789289178046699814423949206961201723135533720300515695707711750674651159727915509838151964318834936358284413507299646383464361398709676871118059143487367466836783610463495854575077451053405796237220891961524649416579447491506488241110776019879688470143492792778950550180978286181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							91f34312d34422d90f1441d626727e577d0b5e57
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (632 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atv.brightfish.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cineramabios.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.business.kinepolis.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fullcinemas.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fullcinemas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fullcinemas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kfd.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinepolis.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinepolis.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinepolisluxembourg.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klubcinema.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magicforest.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.cineramabios.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prive.fullcinemas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privetickets.fullcinemas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-prive.fullcinemas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cinemaclub.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cinemaklub.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cineramabios.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubcinema.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fullcinemas.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fullcinemas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fullcinemas.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greatescape.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greatescape.kinepolis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kfd.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kinepolis.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kinepolisluxembourg.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klubcinema.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magicforest.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magicforest.kinepolis.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001884ee23d0e0000040300473045022100cc3fefb72329a18bb68b8f734d76431d0bff106e72066c889fa95ce274ad78a602203aaabb1f6e9083cc6f0b58d6cdd2d89c938f69ebc90f99e034952b9497b3a424007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001884ee23d3e000004030046304402200e58ed1a3cda76f7f74ef71cf08afdbfab7c00cb2188b822ca537518a05d0a740220175ccbb3e95070fabf5d43299f93743263df773ff5653ec3de833e80f512aa74
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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