associativethinking.com

Issued by R3

About this certificate

This digital certificate with serial number 04:93:ee:23:f3:9c:95:60:aa:58:8b:a7:b6:d6:b8:59:9d:5e was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=associativethinking.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:93:ee:23:f3:9c:95:60:aa:58:8b:a7:b6:d6:b8:59:9d:5e
Serial Number (int): 398787194598837156579688661832986344922462
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e2:05:da:6f:5d:d8:d4:19:f5:ab:c8:7a:ad:bd:bf:69:60:e3:c0:50
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d9:18:f7:94:21:91:e9:9b:dc:6e:ff:40:73:af:71:56:5e:d1:24:01
Fingerprint (sha256): 3f:38:86:99:dd:6b:4b:ee:c0:bf:b5:57:ec:28:c7:b3:a2:3b:c2:7a:22:dc:29:37:de:c4:ef:78:e4:48:f6:f0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate associativethinking.com

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for associativethinking.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

associativethinking.com
bitcoins4vip.com
chicagoprotection.com
fabinterior.com
hempmeats.com.paragonpictures.com
hemppaneling.com
holisticcbdoil.com
imaginitis.com
insuliniscardiotoxic.com.postconstruction.com
mendozafirearms.com
preciousartgallery.com.ultraescorts.com
royalholidaysucks.com
savereligiousfreedom.com
www.clixly.com

Other certificates including the domain name associativethinking.com

(limited to 100 certificates)
roaring.life
midland.work
34755625397.ca
neurolab.world
northernohiogolf.com
bidfarewell.com
ulama.org
koktokay.work
northernohiogolf.com
nsm88.online
associativethinking.com
ulama.org
shetland.xyz
richardmoorse1031.com
trimcorechallenge.com
worldventures.com.vc
papisgirls.ca
weplantpeace.org
enerpactoolsgroup.asia
theotgap.bible
theotgap.bible
havefunwilltravel.org
gar.me
mnmc.org
epanama.com
rencontresexy.be
academic.bible
exortwex.world
tcube360.ai
northernohiogolf.com
swarmbox.org
tctfoundation.org
epanama.com
epanama.com
nordia.finance
poisonivyvideos.org
academic.bible
ulama.org
northernohiogolf.com
epanama.com
theotgap.bible
papisgirls.ca

Certificate

The complete raw certificate details for associativethinking.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGezCCBWOgAwIBAgISBJPuI/OclWCqWIuntta4WZ1eMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA0MDEwMDEwMzNaFw0yMzA2MzAwMDEwMzJaMCIxIDAeBgNVBAMT
F2Fzc29jaWF0aXZldGhpbmtpbmcuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvoOUCVDCLTaamRx4GK2y3clqk2TswijD2zW3ZxrcHGKwFpA89zZY
U/rkEinFrJh2Hv5LsE2e6gONKppGJMSLACBEIUQ83g8FfNAs6ktbg/8NTtNqtPz6
MEAkgvdxFR4Iwilif/JCYloSs1ezAzm3LoRhxxDbYFWrj+iHWD6bJb6Gw6CefPt4
7iLwPSh933ijkXOz9pgKab4bsoYWCo0FF/CkUEnwyX0jlNJulFARFGnbcxXQekvO
8sRmuE312aZeoY3uy/QWUm8O04KBkCTqeOnAV/JGLtp1fzKBfB1NwK52JmxqPJHE
hHxNu4bNwxXjFbY+xG24BNSbYyDnBhoNvQIDAQABo4IDmTCCA5UwDgYDVR0PAQH/
BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8E
AjAAMB0GA1UdDgQWBBTiBdpvXdjUGfWryHqtvb9pYOPAUDAfBgNVHSMEGDAWgBQU
LrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGG
FWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmku
bGVuY3Iub3JnLzCCAWcGA1UdEQSCAV4wggFaghdhc3NvY2lhdGl2ZXRoaW5raW5n
LmNvbYIQYml0Y29pbnM0dmlwLmNvbYIVY2hpY2Fnb3Byb3RlY3Rpb24uY29tgg9m
YWJpbnRlcmlvci5jb22CIWhlbXBtZWF0cy5jb20ucGFyYWdvbnBpY3R1cmVzLmNv
bYIQaGVtcHBhbmVsaW5nLmNvbYISaG9saXN0aWNjYmRvaWwuY29tgg5pbWFnaW5p
dGlzLmNvbYItaW5zdWxpbmlzY2FyZGlvdG94aWMuY29tLnBvc3Rjb25zdHJ1Y3Rp
b24uY29tghNtZW5kb3phZmlyZWFybXMuY29tgidwcmVjaW91c2FydGdhbGxlcnku
Y29tLnVsdHJhZXNjb3J0cy5jb22CFXJveWFsaG9saWRheXN1Y2tzLmNvbYIYc2F2
ZXJlbGlnaW91c2ZyZWVkb20uY29tgg53d3cuY2xpeGx5LmNvbTBMBgNVHSAERTBD
MAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8v
Y3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB1ALc+
+yTfnE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABhzpduvkAAAQDAEYwRAIg
dJqlqunfQaJ11NNsNNoBt6ghcK1osq6Pob6So5pKo0kCICxKFWxta3S6qjMAJoYi
yXXaH4+LXLcNs3XGD/KOA7hZAHcAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6
V6NS61IAAAGHOl27CAAABAMASDBGAiEAyA9BldaDZStZ82Sfaqfvic1LYTePXwyn
65fxdHGfbnwCIQD9NVT9SjOB4u4xov8BdFq2z0h7lHsELzeY1blGjtCoqzANBgkq
hkiG9w0BAQsFAAOCAQEADs0mQEngwLNKweQKvX2GUGgOPUioVWcphe0nITiPu7Rk
NvXf/IT2aMxAirSLBgGaKiVk8u9nhSCC16e4zY7GEXYxW3uatrqlfrI4e3ZWT+Gr
gQ68JjdgzAck7F1xB2DjOSwFYAkIL243Iv/xrvwqA8Gm8+AFtRCNuosxT6xNoE0S
gtE2IBvNxsYvH0BkPjCkk666O2vUjVmI6US9dnSqbYVG7yG2pK617F2+BzI7B6dX
ZTtshw3nxq67j26s71feBBTIijkz9KNfrV3eHarN+TNMl8jA/xpiBepBE07JyKZw
wpzzZoxnD0C6LkB3ShrDV1p5ZSovbXI7ShuP3RJq3A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoOUCVDCLTaamRx4GK2y
3clqk2TswijD2zW3ZxrcHGKwFpA89zZYU/rkEinFrJh2Hv5LsE2e6gONKppGJMSL
ACBEIUQ83g8FfNAs6ktbg/8NTtNqtPz6MEAkgvdxFR4Iwilif/JCYloSs1ezAzm3
LoRhxxDbYFWrj+iHWD6bJb6Gw6CefPt47iLwPSh933ijkXOz9pgKab4bsoYWCo0F
F/CkUEnwyX0jlNJulFARFGnbcxXQekvO8sRmuE312aZeoY3uy/QWUm8O04KBkCTq
eOnAV/JGLtp1fzKBfB1NwK52JmxqPJHEhHxNu4bNwxXjFbY+xG24BNSbYyDnBhoN
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 398787194598837156579688661832986344922462
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-01 00:10:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-30 00:10:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'associativethinking.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24050161605326386665554732577005784934543067240757214075918621542335316253240345748089441398589508175047186622558273752341042825217551907057738899489829105914047125911693400416514615313332936393648025590066066029222493922661001700719107238872430951670321438025744467982146920310419535523989946355544209384963241284196083057843441408971349910746552284262154232765464175335668751031335704960633293002271643251164832554066489648169871722150178173433783022485502507201835070831206510653989413581208132793481989442120864058133221261241359075176282420219515450497328896171375925011746093937813248249566500646822969339415997
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e205da6f5dd8d419f5abc87aadbdbf6960e3c050
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (350 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'associativethinking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoins4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicagoprotection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fabinterior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hempmeats.com.paragonpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemppaneling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holisticcbdoil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imaginitis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insuliniscardiotoxic.com.postconstruction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mendozafirearms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preciousartgallery.com.ultraescorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalholidaysucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savereligiousfreedom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clixly.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001873a5dbaf900000403004630440220749aa5aae9df41a275d4d36c34da01b7a82170ad68b2ae8fa1be92a39a4aa34902202c4a156c6d6b74baaa3300268622c975da1f8f8b5cb70db375c60ff28e03b8590077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001873a5dbb080000040300483046022100c80f4195d683652b59f3649f6aa7ef89cd4b61378f5f0ca7eb97f174719f6e7c022100fd3554fd4a3381e2ee31a2ff01745ab6cf487b947b042f3798d5b9468ed0a8ab
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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