platform.sparkinfluence.net

Issued by R3

About this certificate

This digital certificate with serial number 04:a7:24:16:a6:89:9c:77:14:2a:e8:b1:4f:fc:f3:e8:52:5e was issued on by Let's Encrypt.

With 34 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=platform.sparkinfluence.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a7:24:16:a6:89:9c:77:14:2a:e8:b1:4f:fc:f3:e8:52:5e
Serial Number (int): 405324268818999530812086550952801590596190
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ce:cd:10:f7:64:30:f3:5c:42:ec:9a:43:af:f7:e8:67:e4:4b:34:f2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 58:cc:48:41:5c:17:90:12:91:19:57:00:06:d5:54:fe:f8:3d:73:d5
Fingerprint (sha256): 46:f4:52:71:7b:25:10:d6:a2:33:34:76:d8:9f:5b:a0:10:61:db:17:b5:64:b0:b6:09:5d:5a:33:d5:87:98:91

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate platform.sparkinfluence.net

34

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for platform.sparkinfluence.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

act.physiciansgrassrootsnetwork.org
action.appfairness.org
action.blochforirving.com
action.cancersupportcommunity.org
action.lungevity.org
action.openplans.org
action.peopleforbikes.org
action.progresschamber.org
action.ridersalliance.org
action.vinylsiding.org
action.williams.com
advocacy.kidney.org
advocacy.massmutual.com
fccactioncenter.com
givetoadpac.ada.org
groundswellstrat.com
investwanow.org
magna.action.magnasvoice.com
makeurvoiceheard.com
platform.sparkinfluence.net
savehealthcareinwa.org
spark.savebostonswaterfront.com
usgr.smiths.com
voices.kidney.org
www.aahoa-pac.com
www.autocareadvocacy.org
www.boatingunited.org
www.fccactioncenter.com
www.investwanow.org
www.magnasvoice.com
www.makeurvoiceheard.com
www.ridapac.org
www.savehealthcareinwa.org
www.spiritsunited.org

Other certificates including the domain name sparkinfluence.net

(limited to 100 certificates)
platform.sparkinfluence.net
platform.sparkinfluence.net
oivi.sparkinfluence.net
peopleforbikes.org
mps.sparkinfluence.net
asn.sparkinfluence.net
oivi.sparkinfluence.net
platform.sparkinfluence.net
mps.sparkinfluence.net
dev.sparkinfluence.net
platform.sparkinfluence.net
platform.sparkinfluence.net
peopleforbikes.org
oivi.sparkinfluence.net
terminal-demo.sparkinfluence.net
oivi.sparkinfluence.net
asn.sparkinfluence.net
*.sparkinfluence.net
sparkinfluence.net
sparkinfluence.net
mps.sparkinfluence.net
pmiusa.sparkinfluence.net
oivi.sparkinfluence.net
*.sparkinfluence.net
platform.sparkinfluence.net
*.sandbox.sparkinfluence.net
pmiusa.sparkinfluence.net
*.sparkinfluence.net
oivi.sparkinfluence.net
oivi.sparkinfluence.net
dev.sparkinfluence.net
alpapac.sparkinfluence.net
asn.sparkinfluence.net
mps.sparkinfluence.net
dev.sparkinfluence.net
*.sparkinfluence.net
platform.sparkinfluence.net
peopleforbikes.org
platform.sparkinfluence.net
platform.sparkinfluence.net
default.sparkinfluence.net
peopleforbikes.org
default.sparkinfluence.net
pmiusa.sparkinfluence.net
platform.sparkinfluence.net
*.sandbox.sparkinfluence.net
*.sparkinfluence.net
pmiusa.sparkinfluence.net
platform.sparkinfluence.net
kb.sparkinfluence.net
oivi.sparkinfluence.net
mps.sparkinfluence.net
peopleforbikes.org
asn.sparkinfluence.net
peopleforbikes.org
dev.sparkinfluence.net
peopleforbikes.org
dev.sparkinfluence.net
mps.sparkinfluence.net
mps.sparkinfluence.net
dev.sparkinfluence.net
staging.mailer.sparkinfluence.net
asn.sparkinfluence.net
oivi.sparkinfluence.net
default.sparkinfluence.net
platform.sparkinfluence.net
oivi.sparkinfluence.net
*.sparkinfluence.net
*.sparkinfluence.net
platform.sparkinfluence.net
mps.sparkinfluence.net
sparkinfluence.net
oivi.sparkinfluence.net
platform.sparkinfluence.net
platform.sparkinfluence.net
default.sparkinfluence.net
dev.sparkinfluence.net
peopleforbikes.org
*.sparkinfluence.net
*.app.sparkinfluence.net
oivi.sparkinfluence.net
sparkinfluence.net
pmiusa.sparkinfluence.net
platform.sparkinfluence.net
platform.sparkinfluence.net
sparkinfluence.net
dev.sparkinfluence.net
dev.sparkinfluence.net
mps.sparkinfluence.net
oivi.sparkinfluence.net
asn.sparkinfluence.net
features.sparkinfluence.net
asn.sparkinfluence.net
default.sparkinfluence.net
default.sparkinfluence.net
platform.sparkinfluence.net
pmiusa.sparkinfluence.net
pmiusa.sparkinfluence.net
dev.sparkinfluence.net
peopleforbikes.org

Certificate

The complete raw certificate details for platform.sparkinfluence.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX+90h3/skJmS8JG+thq
wKOWzyemlrs9jy8SL1R0CX4Ma3zX1rxUQDwGd+lFBoiay25RrrCcACV8AxS7GiyZ
e2IZssEXlLNjO6AA+U5VqBHTdxXtpgIpUXOGyIjpPnsElVJCGp0E9WVnrPK3u4xX
htONKnnCCa/6g9jsGM3qZPODRQ+OpfuJI4FFR4FFEPTJX3vIKXm8lw95xJdG37UJ
xqxpAMomuv0AeSRNEVfwAhXYIA8EFY4CBbAG1xm35egWCqYSI8It/fs39ktXk6Ng
PfH4sIdbN6JJG0yw9e+PLAWgEpb2NxvZGHt4cJ0G+9htGqRjF6exAxYXhyPgEZZt
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 405324268818999530812086550952801590596190
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-31 18:30:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-29 18:30:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'platform.sparkinfluence.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22407171654153198445670523906151789671747433621119356000246790789872775853589077907967523302917598337637703032114314592177020130097074987226225849533477359782657253576098584121132323949563243696827322077962663520503158107802371783639743616045886097982353014486898694447959189049866777788013464836791410643291838311861766859656835606789027441856567640265759631856471170427644679666720418017341217015957721349579932985881503571158868212253323975803275331397323627445939076214640524425492619669317207540266252473267268739372164986726559317047634608244294306812592199407812004150302152961303519021084230946390642018119157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cecd10f76430f35c42ec9a43aff7e867e44b34f2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (828 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.physiciansgrassrootsnetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.appfairness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.blochforirving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.cancersupportcommunity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.lungevity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.openplans.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.peopleforbikes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.progresschamber.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.ridersalliance.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.vinylsiding.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'action.williams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advocacy.kidney.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advocacy.massmutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fccactioncenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givetoadpac.ada.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groundswellstrat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investwanow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magna.action.magnasvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makeurvoiceheard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platform.sparkinfluence.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savehealthcareinwa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spark.savebostonswaterfront.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usgr.smiths.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voices.kidney.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aahoa-pac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autocareadvocacy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boatingunited.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fccactioncenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investwanow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magnasvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makeurvoiceheard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ridapac.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.savehealthcareinwa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiritsunited.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189ad6e6bc1000004030047304502210097d8ce86ad14cd08ba051808eb62ed6ac60c36d9db481e4b5199101b9a2668a30220254fed0438b83b20f7bcdff401cdd4cf630d91e8fb3daa4c241073681566efc9007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000189ad6e6bf30000040300473045022100ceeb23f6be360b9fe670d23f25e5636f4a2c7b3b0857329a072cb94fa9e61a4502201b6a41eac022c3ed9b61997d92f232759ddd54ff686b4e495d6916281e218089
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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