aamulehti.ap.richiefi.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:31:55:8c:40:b2:65:8d:f7:45:73:93:6f:a6:5b:80:e6:ee was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aamulehti.ap.richiefi.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:31:55:8c:40:b2:65:8d:f7:45:73:93:6f:a6:5b:80:e6:ee
Serial Number (int): 365236692319577141194749927115611508369134
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 44:7c:1a:82:de:7e:d8:90:9f:75:2c:de:e8:56:ff:51:95:60:d6:53
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8b:4e:84:50:9d:85:bb:5e:78:11:b7:dc:be:d1:94:74:06:76:8a:83
Fingerprint (sha256): 40:eb:e3:3f:82:91:4a:e2:13:5c:ac:73:f3:c2:01:7d:33:ef:74:58:14:01:a9:ae:71:47:6c:c2:3f:81:76:61

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aamulehti.ap.richiefi.net

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aamulehti.ap.richiefi.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aamulehti.ap.richiefi.net
iltalehti.ap.richiefi.net
jamsanseutu.ap.richiefi.net
janakkalansanomat.ap.richiefi.net
jokilaakso.ap.richiefi.net
kankaanpaanseutu.ap.richiefi.net
kauppalehti.ap.richiefi.net
kmv-lehti.ap.richiefi.net
lapinkansa.ap.richiefi.net
lehdet.kauppalehti.fi
luoteisvayla.ap.richiefi.net
merikarvialehti.ap.richiefi.net
nakoislehti.il.fi
nokianuutiset.ap.richiefi.net
pohjolansanomat.ap.richiefi.net
rannikkoseutu.ap.richiefi.net
satakunnankansa.ap.richiefi.net
suurkeuruu.ap.richiefi.net
sydansatakunta.ap.richiefi.net
tyrvaansanomat.ap.richiefi.net
vakkasuomensanomat.ap.richiefi.net
valkeakoskensanomat.ap.richiefi.net
vekkari.ap.richiefi.net

Other certificates including the domain name richiefi.net

(limited to 100 certificates)
kaleva.ap.richiefi.net
digi.paivamies.fi
digilehdet.ap.richiefi.net
digilehdet.ap.richiefi.net
aamulehti.ap.richiefi.net
digilehdet.ap.richiefi.net
digi.paivamies.fi
digilehdet.ap.richiefi.net
digilehdet.sanomapaino.fi
*.richie.fi
alasatakunta.ap.richiefi.net
digi.paivamies.fi
kaleva.ap.richiefi.net
digilehdet.ap.richiefi.net
aamulehti.ap.richiefi.net
digi.paivamies.fi
aamulehti.ap.richiefi.net
iijokiseutu.ap.richiefi.net
*.richie.fi
*.richiefi.net
alasatakunta.ap.richiefi.net
digilehdet-tutkimus.ap.richiefi.net
*.rad.richiefi.net
digi.paivamies.fi
aamulehti.ap.richiefi.net
digilehdet-tutkimus.ap.richiefi.net
aller.ap.richiefi.net
aamulehti.ap.richiefi.net
digilehdet.ap.richiefi.net
digilehdet.ap.richiefi.net
kaleva.ap.richiefi.net
aamulehti.ap.richiefi.net
kaleva.ap.richiefi.net
*.richiefi.net
aller.ap.richiefi.net
aller.ap.richiefi.net
aamulehti.ap.richiefi.net
almatalent.ap.richiefi.net
digilehdet.sanomapaino.fi
alasatakunta.ap.richiefi.net
iijokiseutu.ap.richiefi.net
aamulehti.ap.richiefi.net
iijokiseutu.ap.richiefi.net
digilehdet.sanomapaino.fi
*.rad.richiefi.net
digilehdet.ap.richiefi.net
*.richie.fi
alasatakunta.ap.richiefi.net
digi.paivamies.fi
alasatakunta.ap.richiefi.net
*.rad.richiefi.net
aamulehti.ap.richiefi.net
kaleva.ap.richiefi.net
digilehdet.ap.richiefi.net
digilehdet.ap.richiefi.net
aller.ap.richiefi.net
alasatakunta.ap.richiefi.net
aamulehti.ap.richiefi.net
almatalent.ap.richiefi.net
*.rad.richiefi.net
digi.paivamies.fi
kaleva.ap.richiefi.net
aamulehti.ap.richiefi.net
alasatakunta.ap.richiefi.net
digi.paivamies.fi
aller.ap.richiefi.net
digilehdet.ap.richiefi.net
aamulehti.ap.richiefi.net
digilehdet.ap.richiefi.net
almatalent.ap.richiefi.net
alasatakunta.ap.richiefi.net
aller.ap.richiefi.net
aller.ap.richiefi.net
aamulehti.ap.richiefi.net
aller.ap.richiefi.net
*.rad.richiefi.net
digi.paivamies.fi
digilehdet.ap.richiefi.net
digi.paivamies.fi
aamulehti.ap.richiefi.net
aller.ap.richiefi.net
digilehdet.ap.richiefi.net
aamulehti.ap.richiefi.net
*.richie.fi
aamulehti.ap.richiefi.net
digilehdet.ap.richiefi.net
aller.ap.richiefi.net
digilehdet.ap.richiefi.net
aller.ap.richiefi.net
aller.ap.richiefi.net
aamulehti.ap.richiefi.net
aamulehti.ap.richiefi.net
aamulehti.ap.richiefi.net
digilehdet.ap.richiefi.net
aamulehti.ap.richiefi.net
aller.ap.richiefi.net
alasatakunta.ap.richiefi.net
alasatakunta.ap.richiefi.net
kaleva.ap.richiefi.net
digilehdet.sanomapaino.fi

Certificate

The complete raw certificate details for aamulehti.ap.richiefi.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUSYJT94bYm7A+mfsucF
2/XVptIpfdcxs6ROBDx4a/3KeC6Y87Wu5GQ+aJOGRMpsOT5Yh26qVUWmFnlSAZem
RuJU9E5Y+DJ7xRucCheqCvx2iF+npfSyuZ8tcDKCEBerZlkji1dlJGByFykY65K4
yRzSDFOqQwXTu0R43RcIF/OA9Oaz4v3aIVPONCxkNbJ+4enaa3z0CHVg1+v+jtvL
LujWqwI4mhsZ4oaV5R0CRX/tR0ZJuGff0lRpbnKcCk0uSsJVQ5EsvMpLaSXDGts4
DroQ3APyyWIacuhSMHSuhUjYcAAWdAyLoIHWkFgLpiEshnjT7hqCCUW20b201PXX
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 365236692319577141194749927115611508369134
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-23 07:17:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-21 07:17:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aamulehti.ap.richiefi.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25407724417239726150523576343143289476111362790865112309619804949175285941328373832798284256233596768793664680158527230513467675302460004777157361477913631153945261263851660482677500885723756685026475962937740155899740500872406310528800329163510370756602780478408069742170594899220840204039797734079266850095145601737392840284714718608175065588255710460165051073553258041080286197136756990276614000089865618074178325492209645675122830383143058172491304223262512391104435252362977259679607781114254784374426441695120578345583302614103383722613509366796281844993894495961868748169452398651149881176968137463297276762021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							447c1a82de7ed8909f752cdee856ff519560d653
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (691 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aamulehti.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iltalehti.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamsanseutu.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'janakkalansanomat.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jokilaakso.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kankaanpaanseutu.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kauppalehti.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kmv-lehti.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lapinkansa.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lehdet.kauppalehti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luoteisvayla.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merikarvialehti.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nakoislehti.il.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nokianuutiset.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pohjolansanomat.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rannikkoseutu.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satakunnankansa.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suurkeuruu.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sydansatakunta.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tyrvaansanomat.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vakkasuomensanomat.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valkeakoskensanomat.ap.richiefi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vekkari.ap.richiefi.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016cbd8ce91e000004030046304402202e9611a513bf38520bd49061aa0125ec2085b80902bcf824519f2eb261de955f02202447358e1f2d27a8cfaa635656a25534d54fb33216801aaa003e4ebb0d666a4c007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016cbd8ce9200000040300483046022100d54996d4cce2a0ac7ca2373381e214446932279cbb22ce9c86fbab90400d4c9e022100f5949f0de437627883c18176c0112bb77f41aa1b56071c4868aa1e854c92df71
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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