thinkbigtech.com

Issued by R3

About this certificate

This digital certificate with serial number 03:10:33:b8:24:14:e0:6c:57:f0:0c:c0:ee:0d:4a:d4:a0:a2 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=thinkbigtech.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:10:33:b8:24:14:e0:6c:57:f0:0c:c0:ee:0d:4a:d4:a0:a2
Serial Number (int): 266850122408243521076295379270636563374242
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 45:2a:09:17:0e:55:d2:11:48:a3:be:b6:cf:8d:2a:50:a0:17:36:d1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 57:40:5c:45:bd:e1:c0:a9:04:72:9c:c6:19:47:d6:75:83:4c:39:8e
Fingerprint (sha256): 48:09:b3:a3:30:f2:0f:b8:bd:ba:ee:46:5d:f2:f5:fa:ae:d1:b8:da:71:dc:7a:2f:3f:c8:d7:b1:3c:b5:57:00

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate thinkbigtech.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thinkbigtech.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

thinkbigtech.com
www.thinkbigtech.com

Other certificates including the domain name thinkbigtech.com

(limited to 100 certificates)
contracts.thinkbigtech.com
writeon.io
thinkbigtech.com
signage.thinkbigtech.com
thinkbigtech.com
office.thinkbigtech.com
thinkbigtech.com
www.blocknetprotocol.com
swiftprocessing.org
thinkbigtech.com
startwithbig.com
startwithbig.com
display.thinkbigtech.com
clients.thinkbigtech.com
www.chat.thinkbigtech.com
fundraising.thinkbigtech.com
assets.thinkbigtech.com
dev.web.thinkbigtech.com
assets.thinkbigtech.com
thinkbigtech.com
thinkbigtech.com
swiftprocessing.org
clients.thinkbigtech.com
ludivineachouri.com
dev.web.thinkbigtech.com
www.analytics.thinkbigtech.com
clients.thinkbigtech.com
www.dcesmart.com
display.thinkbigtech.com
thinkbigtech.com
miandian360.com
clients.thinkbigtech.com
assets.thinkbigtech.com
professeurs.diploma-sante.fr
thinkbigtech.com
www.clients.thinkbigtech.com
dev.pointsplenty.com
www.thinkbigtech.com
thinkbigtech.com
www.simpletransit.com
www.chat.thinkbigtech.com
thinkbigtech.com
passwords.thinkbigtech.com
clients.thinkbigtech.com
thinkbigtech.com
monitoring.thinkbigtech.com
thinkbigtech.com
writeon.io
www.passwords.thinkbigtech.com
coachee.m1studio.co
www.c360.ai
thinkbigtech.com
thinkbigtech.com
melbtaxis.com.au
www.wonm.co.uk
thinkbigtech.com
monitoring.thinkbigtech.com
thinkbigtech.com
display.thinkbigtech.com
marketing.thinkbigtech.com
display.thinkbigtech.com
build.thinkbigtech.com
thinkbigtech.com
www.clients.thinkbigtech.com
draft.ulto.ai
startwithbig.com
tools.happily.ai
schwimmschule-flipper-ostsee.de
link.anipo.org
racer.starpaint.tech
www.clients.thinkbigtech.com
www.wonm.co.uk
thinkbigtech.com
drive.thinkbigtech.com
startwithbig.com
startwithbig.com
monitoring.thinkbigtech.com
dev.thinkbigtech.com
assets.thinkbigtech.com
startwithbig.com
digitaldiaryapp.com
assortpro.com
clients.thinkbigtech.com
clients.thinkbigtech.com
www.clients.thinkbigtech.com
display.thinkbigtech.com
universal.scraper.thinkbigtech.com
thinkbigtech.com
dev.web.thinkbigtech.com
drive.thinkbigtech.com
www.blocknetprotocol.com
drive.thinkbigtech.com
thinkbigtech.com
www.analytics.thinkbigtech.com
startwithbig.com
display.thinkbigtech.com
marketing.thinkbigtech.com
assortpro.com
signage.thinkbigtech.com
miandian360.com

Certificate

The complete raw certificate details for thinkbigtech.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGBDCCBOygAwIBAgISAxAzuCQU4GxX8AzA7g1K1KCiMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA1MDYxMjExMzFaFw0yNDA4MDQxMjExMzBaMBsxGTAXBgNVBAMT
EHRoaW5rYmlndGVjaC5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoIC
AQCwoynUtzJfwp7D0WM1sU3kGAYTjFSD1rYde+ein2tuZI50rsh5anh67H6JI3sV
UCL97AGn+swTwEAL6ZJZ1+7W0Ztxt9hRrPZO2OlkvZDjyXEpc/d81002TiVO5s7d
2hVLJsDzkmNPBXFKt2PLe7jv8+A6mvk/YBE+sdL0h3z7UVor0HetZHUYYoKOJ0Zf
+hDJIfDjvtuDM7Di1wtN4zFxOlBdZ5WyGGnu0mZfruJ1HZOr5T1CUlFxZcimkOlw
LfPaaH8YPfgU8tFs7M0N6+QXhpVBTf97waNIh1yksL5bZUbiAWDal5yWVyKpf9I1
xEw8jnoZF01xYNE3IA+tA0gdHmEmrK8FFbTqjTuTHWuLU4dMqgkUeH+bjGRLjpU9
qv/5Y9XJBqM+19vQlncm930vKDFwMXMqL868vDJZo/WXIMdJNlOaem5HAFisaGwU
L168oyu6Xiu70coRxjAbxQvFMHC/Vxz77xzuiWjGHU2+xObgvvWx21hF4A4/01Pn
M8JdpBrBB+H4YrVMoZqcaEpTPKxdWWdjgHTSbhfkUa5wAbIDP4MvMYyM5uU+B++w
WT7CAG9OkNqHMw1P+saSbOEvLtDBjHTd5221+7UvWnMfT/wS2LbH/4U839CSLkeZ
zZSleUCFTJwuGlwTf+WdbFlBtPhl4xXzF6aZ5mEPxwrskQIDAQABo4ICKTCCAiUw
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAM
BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRFKgkXDlXSEUijvrbPjSpQoBc20TAfBgNV
HSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYI
KwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0
cDovL3IzLmkubGVuY3Iub3JnLzAxBgNVHREEKjAoghB0aGlua2JpZ3RlY2guY29t
ghR3d3cudGhpbmtiaWd0ZWNoLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQUG
CisGAQQB1nkCBAIEgfYEgfMA8QB3AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FI
WUZxH7WbAAABj04H5FwAAAQDAEgwRgIhAK8/sGW2kOCdXkZoRb2Jtr8bXD+uZOOV
No0dN1X5kuK1AiEAqQudtT0W+OvH9Mp7RUju61mHMgh5Hz0Ud1m6wBIk8KsAdgDf
4VbrqgWvtZwPhnGNqMAyTq5W2W6n9aVqAdHBO75SXAAAAY9OB+UdAAAEAwBHMEUC
IQDUteTtcbkf5NNrK7Tm0oXnfkLGxDzF3wnKMFay0sRW8QIgAIS1E/Ji4cQxB8lZ
s1boKJWvjYi1JSNxT6MYq4GMjQIwDQYJKoZIhvcNAQELBQADggEBAGIbCAuVdPBZ
cOLIBm7qmGAM8fyM4TZ5Aem1Kbr0yqljlhO9OJYLpAoRTAHbfg/4d1LJeSdLWbHq
2AH0AW3ewYAK5EQ8amQs8PZaMWMABlFRhzZfxOum25ki67jEA+P6Om63e4Vkldb+
zdi1F1//smCsHO/Y2wquEvNwEIV14qbeOw8J/rjXMYxkY+EXIXSkPrE0PR9tzbB6
cD/n6b97kz4jXrz6Raccg14LGZ029bXWt4POMo67uosii+e6TlBYjte9GpkdTuyo
7NZVJPZNIFlpp7hU0nbnjwITJEM18QDqmTLKY+6+YySw+DZC0uMkoqBioQt5fr2n
F9Of49uk8I0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsKMp1LcyX8Kew9FjNbFN
5BgGE4xUg9a2HXvnop9rbmSOdK7IeWp4eux+iSN7FVAi/ewBp/rME8BAC+mSWdfu
1tGbcbfYUaz2TtjpZL2Q48lxKXP3fNdNNk4lTubO3doVSybA85JjTwVxSrdjy3u4
7/PgOpr5P2ARPrHS9Id8+1FaK9B3rWR1GGKCjidGX/oQySHw477bgzOw4tcLTeMx
cTpQXWeVshhp7tJmX67idR2Tq+U9QlJRcWXIppDpcC3z2mh/GD34FPLRbOzNDevk
F4aVQU3/e8GjSIdcpLC+W2VG4gFg2pecllciqX/SNcRMPI56GRdNcWDRNyAPrQNI
HR5hJqyvBRW06o07kx1ri1OHTKoJFHh/m4xkS46VPar/+WPVyQajPtfb0JZ3Jvd9
LygxcDFzKi/OvLwyWaP1lyDHSTZTmnpuRwBYrGhsFC9evKMrul4ru9HKEcYwG8UL
xTBwv1cc++8c7oloxh1NvsTm4L71sdtYReAOP9NT5zPCXaQawQfh+GK1TKGanGhK
UzysXVlnY4B00m4X5FGucAGyAz+DLzGMjOblPgfvsFk+wgBvTpDahzMNT/rGkmzh
Ly7QwYx03edttfu1L1pzH0/8Eti2x/+FPN/Qki5Hmc2UpXlAhUycLhpcE3/lnWxZ
QbT4ZeMV8xemmeZhD8cK7JECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 266850122408243521076295379270636563374242
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 12:11:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-04 12:11:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thinkbigtech.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 720617545835685020090031790125299528551152532143479997481474973862051747876165417347045275104645689591496424117604798688664439833451999666806982153106070179310464575159250257330770427078052947741951999257109705744962021248080666682936575938936979676154598868246407089276240923502861610432917836769663200158802080933322590155964563896878710928922707121526161654661879799783591604689064470246067202538347989465325667086775430941565285069906389813322874907472873749525080984872087358737146399732993139789650897991023486137382047540548133941906740408496042071512765044204826315464482322744830756928755160427469173063983456328197685846680954384807185365899331878114134189999389236663226197854418376993225074609914091979756468164529833150782796687368116151492022346198646215800232207623702121041610704340095905186831835932182039181056560755535477733447500721605408440309969777088640991355356900571139388807161342972026664385212565401633497547693731412518071450211180998646770236435898081282353664861092904648862122064234336625340002890461149627868242464390858344453648860296414574538377961741465505286192500878542814388903938249861826211248176278762247994296864111584336974850165618243982222479452397639377199664733173092059047239107669137
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							452a09170e55d21148a3beb6cf8d2a50a01736d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thinkbigtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thinkbigtech.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f4e07e45c0000040300483046022100af3fb065b690e09d5e466845bd89b6bf1b5c3fae64e395368d1d3755f992e2b5022100a90b9db53d16f8ebc7f4ca7b4548eeeb59873208791f3d147759bac01224f0ab007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f4e07e51d0000040300473045022100d4b5e4ed71b91fe4d36b2bb4e6d285e77e42c6c43cc5df09ca3056b2d2c456f102200084b513f262e1c43107c959b356e82895af8d88b52523714fa318ab818c8d02
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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