knutsfordcolourrun.uk

Issued by R3

About this certificate

This digital certificate with serial number 03:33:21:ed:77:d6:43:67:09:64:5b:d9:36:69:34:21:21:21 was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=knutsfordcolourrun.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:33:21:ed:77:d6:43:67:09:64:5b:d9:36:69:34:21:21:21
Serial Number (int): 278736356037047406226428981102538938982689
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 89:f6:f1:b2:f2:2a:98:26:09:24:a1:f9:82:21:cd:0c:0d:f1:3d:71
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a4:08:f7:a3:af:48:bd:4b:6f:44:10:77:a3:b9:70:06:e1:1e:32:9f
Fingerprint (sha256): 4c:af:62:d2:53:2c:cb:2e:fd:f5:9b:b0:45:39:b8:b0:88:48:af:29:69:b4:32:6c:dc:83:77:6c:37:67:18:db

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate knutsfordcolourrun.uk

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for knutsfordcolourrun.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpcalendars.knutsfordcolourrun.uk
cpcontacts.knutsfordcolourrun.uk
knutsfordcolourrun.uk
www.cpcalendars.knutsfordcolourrun.uk
www.cpcontacts.knutsfordcolourrun.uk
www.knutsfordcolourrun.uk

Other certificates including the domain name knutsfordcolourrun.uk

(limited to 100 certificates)
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
www.knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
www.knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk
knutsfordcolourrun.uk

Certificate

The complete raw certificate details for knutsfordcolourrun.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFpzCCBI+gAwIBAgISAzMh7XfWQ2cJZFvZNmk0ISEhMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMjkwNTM1MzhaFw0yNDAyMjcwNTM1MzdaMCAxHjAcBgNVBAMT
FWtudXRzZm9yZGNvbG91cnJ1bi51azCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBALVClbx3ysI/+ARZ/KdXN4fgSzryrBQng06vaHSDCHmKQP9MIdKxwov+
BtaibJfA9trh62UDZPZrMhtDR7fe9iitjzcjiWVPiiDTF7/B5QhJqDjQWHDhuTyu
P9pl+ClrYFtlwJaSfRNAUGOow3ZUxQ5kTGY+eDp3WHVD1j+4x03o/ZlCALPmfhWn
iPCkMpRXdHjiThpdQye1jpUSMxj0bybS7dmhmJAIQGjprxv0UYq3B0xv073YVgK+
esjb/buN9cTvym3gEDCZ3/MD11frXONe9q6rtrICeEIJ8A+XNs32lV4qdOlenjZ2
gYyavQw5SjqvaMJ4MkBbF6m54PNyyN0CAwEAAaOCAscwggLDMA4GA1UdDwEB/wQE
AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIw
ADAdBgNVHQ4EFgQUifbxsvIqmCYJJKH5giHNDA3xPXEwHwYDVR0jBBgwFoAUFC6z
F7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVo
dHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxl
bmNyLm9yZy8wgc8GA1UdEQSBxzCBxIIhY3BjYWxlbmRhcnMua251dHNmb3JkY29s
b3VycnVuLnVrgiBjcGNvbnRhY3RzLmtudXRzZm9yZGNvbG91cnJ1bi51a4IVa251
dHNmb3JkY29sb3VycnVuLnVrgiV3d3cuY3BjYWxlbmRhcnMua251dHNmb3JkY29s
b3VycnVuLnVrgiR3d3cuY3Bjb250YWN0cy5rbnV0c2ZvcmRjb2xvdXJydW4udWuC
GXd3dy5rbnV0c2ZvcmRjb2xvdXJydW4udWswEwYDVR0gBAwwCjAIBgZngQwBAgEw
ggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgA7U3d1Pi25gE6LMFsG/kA7Z9hPw/TH
vQANLXJv4frUFwAAAYwZylJKAAAEAwBHMEUCIQDJX7i3GjLtrZFSUxm0dea9gL0p
ogfz28oaCoD6nrXVvwIgJPNQmWPNRkaSrOyx+3kgabn+s+1ANc6qX1T95E4bV4sA
dgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYwZylJIAAAEAwBH
MEUCIGVBVQxlC5pv6TgwzSm7YhBqvuDGBgdHxCX9NUz5W4LqAiEAhPm3heRqMF5j
E8G5CXR69SYOyPOpSXPZb3Wb1+jEjU0wDQYJKoZIhvcNAQELBQADggEBAFlDk9DS
kh5vSGg0uWcGXSM9Ysrcrq/Hgjx2t/37nwB8jto3MKwJJtNP8h9bp8mWQT5jbbvP
fqyo8ERJjSGCVkqzDSpe2iYl++tL7hXvpzOJZxbSoagplTLw1ZPt/WNsRcqUKa5Z
2TouKm06rNuuCN2bwZnxd6VPZgriDl2lZmXbj+cdUW6bsqfWUuKG1e6lj2pad0xj
bfNwfrSHUO6YP7rzeq1deWZ49uAUo4vUIQWS/DD17wCd6kdcPC9Cl0ookjBJCM2n
DoAlv1SExU6sF6Kh5E486G36x8I7Eot0asY88cXwdRvHtOic69LQy0Cqn9OITvWQ
8zN9zzWHhVWo1yQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUKVvHfKwj/4BFn8p1c3
h+BLOvKsFCeDTq9odIMIeYpA/0wh0rHCi/4G1qJsl8D22uHrZQNk9msyG0NHt972
KK2PNyOJZU+KINMXv8HlCEmoONBYcOG5PK4/2mX4KWtgW2XAlpJ9E0BQY6jDdlTF
DmRMZj54OndYdUPWP7jHTej9mUIAs+Z+FaeI8KQylFd0eOJOGl1DJ7WOlRIzGPRv
JtLt2aGYkAhAaOmvG/RRircHTG/TvdhWAr56yNv9u431xO/KbeAQMJnf8wPXV+tc
4172rqu2sgJ4QgnwD5c2zfaVXip06V6eNnaBjJq9DDlKOq9owngyQFsXqbng83LI
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278736356037047406226428981102538938982689
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-29 05:35:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-27 05:35:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'knutsfordcolourrun.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22881967440268205953966706986786733971186848213586774487739629913995441820258223896057118258612381842906746987343944842059343991244508706564558669633213150553113843271613435490721466964549090073156040394481229405951112255458523773992708303338640162059358202916473587989052583561435622216977969263473091385744820090176839531634479751576273035890780262692180199925664988403323478745774952780760604108493552225290726241348429598598948031935761708384335976677507605789330067839031145158357186909081103811460736729112994916875844875473852452241393725461019344947814521673908167892475065422533553808098838925547667782289629
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							89f6f1b2f22a98260924a1f98221cd0c0df13d71
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (199 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.knutsfordcolourrun.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.knutsfordcolourrun.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knutsfordcolourrun.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpcalendars.knutsfordcolourrun.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpcontacts.knutsfordcolourrun.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.knutsfordcolourrun.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c19ca524a0000040300473045022100c95fb8b71a32edad91525319b475e6bd80bd29a207f3dbca1a0a80fa9eb5d5bf022024f3509963cd464692acecb1fb792069b9feb3ed4035ceaa5f54fde44e1b578b00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c19ca5248000004030047304502206541550c650b9a6fe93830cd29bb62106abee0c6060747c425fd354cf95b82ea02210084f9b785e46a305e6313c1b909747af5260ec8f3a94973d96f759bd7e8c48d4d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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