sporty.org.nz

Issued by R3

About this certificate

This digital certificate with serial number 03:e8:23:26:cf:fc:1a:54:18:0e:ef:ea:89:1d:0c:b7:2f:73 was issued on by Let's Encrypt.

With 54 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sporty.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:e8:23:26:cf:fc:1a:54:18:0e:ef:ea:89:1d:0c:b7:2f:73
Serial Number (int): 340329091426503993025503056055811039506291
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2a:00:4f:dc:a7:d7:30:52:4b:89:5a:f0:d5:be:70:29:7d:ad:10:8d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a2:d3:f4:9d:af:71:ae:be:f9:f0:fe:e3:99:1b:d9:73:2f:ea:d4:61
Fingerprint (sha256): 48:f6:0c:0f:bc:86:7b:af:3e:a4:8f:00:ce:b4:67:7d:77:8e:80:bb:72:18:22:15:c4:2b:c2:6f:ee:10:4e:42

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.org.nz

54

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

athleticswairarapa.org.nz
aucklandspeedway.co.nz
aucklandspeedway.nz
baysidebaseball.co.nz
beachfrontvilla.co.nz
cashmerefootball.co.nz
centralfootball.nz
cfcc.co.nz
christiebuildersandjoiners.co.nz
cjrs.co.nz
employmentarbitration.co.nz
equilegal.co.nz
gonville.school.nz
hastingscentral.school.nz
hbwaterpolo.net.nz
hbyt.co.nz
heatvolleyballclub.org.nz
invictusfencingclub.org.nz
jeanbatten.school.nz
kaitakefc.co.nz
kartsporthb.co.nz
kartsportmanawatu.org.nz
kartsportnelson.co.nz
kartsportwellington.nz
katikatirugby.nz
kelburncroquet.nz
kelburncroquet.org
kelburncroquet.org.nz
nelsonspeedway.co.nz
netballnorthharbour.co.nz
northshoremasterswimmers.com
nsms.nz
nzaimsgames.co.nz
nzcanoepolo.org.nz
nzmrl.co.nz
ohainightcapsrfc.com
pakowhai.school.nz
palmycompanioncard.co.nz
piratesbaseball.nz
shannon.school.nz
southernrugby.org.nz
sporty.org.nz
surfingforfarmers.com
tamateaprimary.school.nz
tasmanrugby.co.nz
timaruoldboys.com
touchkatikati.nz
trihb.kiwi
volleyballtasman.nz
waikarakaparkspeedway.co.nz
waikarakaspeedway.co.nz
waikarakaspeedway.com
waisssport.co.nz
wsbrc.co.nz

Other certificates including the domain name sporty.org.nz

(limited to 100 certificates)

Certificate

The complete raw certificate details for sporty.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppljeeK+L2I9343FhbhS
U/9u4/Du7LxdzZY+BIkUEF9xVne61YuHkr+KtXlrd3QKkzrGRFh6Ev0SUGEtdTUD
mlEL+C32t+5UfTW0lltX4WvvkWk/5EcSyJAf24u5tlSvom/zvQULfyanZk6VB6YK
8z8W/1QfzrjaexIw3xdFuk5FuJxNzVdJNYyqmjIXsK73dmmvp0kz6TvOumrVsdyx
qRbe5Esi9m8sy1K5atJFBTdV/ohVUS5S3w+N4wFJLwohAqW90Y9i0NTO76DiTJWZ
48RS5IlPR0JPtTywKA4jucOfC2Nnnsc5PwRr11RNj3UOk46YEFR41DJnHNMgeoc0
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340329091426503993025503056055811039506291
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-22 03:03:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-20 03:03:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21031197351556712604194849767399421555687305981182665761421504179325567685054576735540289849180308274392799485617781017338933171817067546858793265745244078359474654490365193667604034494338083807598691252298260554009798457010908152762542471996538085351588386853047091285742249378658860509367897497192558054390796029612680965621308064588368064848973358991229617075097538588332366517413579524793242315397117910929117537205635474201215835220284108814141326182761722336457878803007245586777892660265909929599126092643620665727631920653658972230243612676884012937058211047579173732920472106537356916647374105885827318363217
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2a004fdca7d730524b895af0d5be70297dad108d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athleticswairarapa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandspeedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandspeedway.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baysidebaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beachfrontvilla.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashmerefootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralfootball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christiebuildersandjoiners.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cjrs.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employmentarbitration.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'equilegal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gonville.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastingscentral.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbwaterpolo.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbyt.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heatvolleyballclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invictusfencingclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeanbatten.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaitakefc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kartsporthb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kartsportmanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kartsportnelson.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kartsportwellington.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katikatirugby.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kelburncroquet.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kelburncroquet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kelburncroquet.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonspeedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballnorthharbour.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northshoremasterswimmers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsms.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzaimsgames.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzcanoepolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzmrl.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohainightcapsrfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pakowhai.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'palmycompanioncard.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piratesbaseball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shannon.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernrugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surfingforfarmers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tamateaprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasmanrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timaruoldboys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchkatikati.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trihb.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volleyballtasman.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikarakaparkspeedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikarakaspeedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikarakaspeedway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waisssport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsbrc.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f9e78325a000004030047304502206192214856e176e5631dd86a781dd95753fafb089019736ae7447820547016de022100ab182a729bfc71cb8c4020e50d64c043d6c8164d77fc5efd3dbe308dc46193040075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f9e783262000004030046304402206cfce35a50f06be3a5ec6c90ae768a1588ea1a23ea7893cf4e9773275bb09dc00220687e659473113a3eda4fee7b29ce29f7e74fd7f948d1ac9e79203231d4c7d3c4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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