micollab.lea.co.bw

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:aa:6e:08:e1:80:e5:38:03:4b:19:ba:ea:ec:54:3f:ea:a9 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=micollab.lea.co.bw

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:aa:6e:08:e1:80:e5:38:03:4b:19:ba:ea:ec:54:3f:ea:a9
Serial Number (int): 319331121363505793159384955138311492463273
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ca:48:fa:fa:50:0e:71:a7:e1:26:07:de:a2:53:3f:90:d9:28:ad:e2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 91:49:30:e4:86:97:7f:20:fd:95:9c:14:47:47:33:9d:be:81:3a:ea
Fingerprint (sha256): 4d:c6:69:0a:a5:a8:ec:6a:cb:00:f3:8b:bd:4a:ab:47:c0:58:e0:9a:03:31:40:08:fd:b8:bc:72:d8:7a:91:ee

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate micollab.lea.co.bw

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for micollab.lea.co.bw

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

awv.lea.co.bw
micollab.lea.co.bw

Other certificates including the domain name lea.co.bw

(limited to 100 certificates)
support.bluerockre.com
helpdesk.fintonhouse.org.uk
support.bluerockre.com
webmarketer-admin.webmarketer-staging.me
servicedesk.energyexemplar.com
tickets.andirect.org
leaservicedesk.lea.co.bw
support.mastercardfdn.org
helpdesk.fintonhouse.org.uk
lea.co.bw
helpdesk.fintonhouse.org.uk
support.bluerockre.com
www.treatsby.me
www.shawprogroup.com
admin.adam.anyware.software
assetmgmt.jennycraig.com
smeregistration.lea.co.bw
sjuh.nl
mail.lea.co.bw
helpdesk.fintonhouse.org.uk
vinayp.com
applicationsupport.fqml.com
servicedesk.odc.co.bw
servicedesk.gmhec.org
support.bluerockre.com
leaservicedesk.lea.co.bw
leaservicedesk.lea.co.bw
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
micollab.lea.co.bw
servicedesk.projecthope.org
helpdesk.secureauth.com
helpline.petron.com
support.bluerockre.com
accre.zoeames.com
shannonlau.com
helpline.petron.com
servicedesk.kings.edu.au
leaservicedesk.lea.co.bw
helpdesk.neopharm.ca
www.studiomedico-izzo-arduino.it
helpdesk.utimco.org
helpdesk.sparkswebapps.com
www.shawprogroup.com
helpdesk.trimaxamericas.com
incom.xyz
vinayp.com
support.embelton.com
blossom-natural-health.com
support.bluerockre.com
helpdesk.empg.com
support.bluerockre.com
ithelpdesk.optomed.com
helpdesk.dbsupply.com
helpdesk.fintonhouse.org.uk
support.bluerockre.com
lea.co.bw
leafytech.ca
ithelp.dreamliveprosper.com
helpdesk.brandontrust.org
levis4000.megataxi.com
mail.lea.co.bw
ayudati.auteco.com.co
support.bluerockre.com
helpdesk.fintonhouse.org.uk
gurubargoa.in
support.bluerockre.com
helpdesk.fintonhouse.org.uk
support.bluerockre.com
*.lea.co.bw
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
turnips.sandysandy.net
help.btvi.edu.bs
ithelpdesk.sgmc.org
mail.lea.co.bw
lea.co.bw
support.tg-sec.com
itservicedesk.cda.org
itsupport.laborie.com
helpdesk.harvestbible.org
mbg.lea.co.bw
support.bluerockre.com
itservicedesk.cda.org
link.panierhalal.fr
leaservicedesk.lea.co.bw
helpdesk.fintonhouse.org.uk
disruptlabs.xyz
smeregistration.lea.co.bw
booking.royalhaircare.lk
admin.hlm.at
apteach.org
leaservicedesk.lea.co.bw
helpdesk.empg.com
MBG.lea.co.bw
www.proexata.com
helpdesk.fintonhouse.org.uk
support.bluerockre.com
support.genesis-tec.com
support.bluerockre.com

Certificate

The complete raw certificate details for micollab.lea.co.bw in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGazCCBVOgAwIBAgISA6puCOGA5TgDSxm66uxUP+qpMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODExMjkwOTUzNDBaFw0x
OTAyMjcwOTUzNDBaMB0xGzAZBgNVBAMTEm1pY29sbGFiLmxlYS5jby5idzCCAiIw
DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANH4NE0iTwosmeYgm5h897l66a5l
H6nId+IiZ5VL0VZDYCfhOQPj+GUQEUb22LhNBZoxdYC9BFpgM/LcAV9vD3lXQnQe
3FAaqm7KVBX0R69Ypu4oLQCEfYXOgmxHuRd069cH+dlJPouWgrIKEWI+CU/ur0N7
NiF0mDF1NSYWSr/SE2y2gzJYqcckjDq3K0PHlw1v/rTbdgfnaIC5iWOmCn3s58ir
MzgVqzmYBZI82hgfphslWNamYwLtgpO201ojkpl1V6PiJYyEWrn2Jr/qyjX4W5V2
RuO9zBcyKgscWvK5y86sXwxIquf6UsDu/TCgh+mYY2fyOuskDS0Q+PetX2vLz9OW
RdPzZRq6RBJPH9ujYpZzsOlEHztV1Z+C2LNlDA5C3nTb91pA3kv2b6imRtVGelRV
XoXbKXnvvy2OIlaeBXGusJggGRa/X7fEU6BcJKwsihpCpZx5cMUPQuq7FHIsz8L+
nUUt0sGu2c9/+qhnVlYt1OTm2vOQD5TeCqfwCUvZ2S++pnf6HgOJbhVRIQuR2W9R
5MaUvvCqX1bUJh6qbLx1Cil3RnP41EpzVW309A65fvXwLQU/xXCfliO11Bzvtbi0
iLjkHo81/GvuUI9Zl8LMlpe7DOPenIsmQvwFHVD3wB/3A7ERDrdi56WVNf60QUmY
rIcLhHkzB2KFcBSbAgMBAAGjggJ2MIICcjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FMpI+vpQDnGn4SYH3qJTP5DZKK3iMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF
Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au
aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu
aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wLAYDVR0RBCUwI4INYXd2LmxlYS5jby5i
d4ISbWljb2xsYWIubGVhLmNvLmJ3MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysG
AQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQu
b3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAdH7agzGtMxCRIZzOJU9CcMK/
/V5CIAjGNzV55hB7zFYAAAFnXxpVigAABAMARzBFAiAJTzyBWmtiQ7HJv70jLWQo
lxhN3uI4rs42aphie27hAAIhAOVbhiUkr7pon1hronHoV7KDA1KKLNtzkflpVsbv
adsUAHYAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFnXxpTiAAA
BAMARzBFAiEAxMcLeGAfaheMO9aQQYTfgbnQjVbzsBWs3Zrv3fDFeTICIDNXRDhi
NUwnmFTvmLnfutYhv7tO2w2s2Uk4Lafhzj0jMA0GCSqGSIb3DQEBCwUAA4IBAQBA
9R4N215wRH0ky68k42r6t1l5UuZhCwZbdYdLbNkkzwWa1uzHIaCFqy1pvJMlS8UR
uRCY6QZEsqYhcLlCgp6/w+2CxSRMisCVooIJgZ3Hf5JDoz6g+OxC16/HbUYFf11v
uA4Jh5jFUBJNEl647M9Glkf4CMDGEoz8nba3oy6NltbWLdKsjHg03WP3y7miH2Gk
qeO3q12xJ976g3LQnSfEJFVnVBrT1JQ6wywuEt0bczqzMsSY9Nqg9La+Ixuktn/g
69RswvuyItJsNt3RosZZZbRkGPx5gF4dw2t9Wuq+UdFhiNmScBdeoXmuPMBokmcg
8YLuU/A0CFr2qAVA9Io4
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319331121363505793159384955138311492463273
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-29 09:53:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-27 09:53:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'micollab.lea.co.bw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 856601021185722156362707754640111978008883075159992379034257270930001580063390545685525640274831620844962432688009472516831290306170966735359630532937844068591050261706945120828761147975456897636995384830042970787168906742853934305358194060603595961965902723202671712999672489097491992317359495550648870530001297733646647738635524554132380684576825477837875163415244570188094162007357649670014204241271605299141889138724304691078854804753058834370720088731483117454846124098283504051460708243829984766725789459558510652880398901549858763454332998722630645933664474808281402758098782821463650156382897879708852504974376092838687638433312419864640453167659873530603908841539756882818137640575772483799986603069238989115224095633521662461808874706720448729126708208199832485477740996272506111449692130919504190925824511615662217143050593894518451235328868304260629825789847178955823383984692907470106223526538453628902702977168457626619051617012137773023514158750208295694510688126198354715958611325103371818935071588371652624281874554730776335405421627997601441973647050542976092485652877612152519266162929082943799048796935266012454396977304448376993718541335555311145339940806408955714564167219322891216519610122850207558987521463451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca48fafa500e71a7e12607dea2533f90d928ade2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awv.lea.co.bw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'micollab.lea.co.bw'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001675f1a558a00000403004730450220094f3c815a6b6243b1c9bfbd232d642897184ddee238aece366a98627b6ee100022100e55b862524afba689f586ba271e857b28303528a2cdb7391f96956c6ef69db14007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001675f1a53880000040300473045022100c4c70b78601f6a178c3bd6904184df81b9d08d56f3b015acdd9aefddf0c5793202203357443862354c279854ef98b9dfbad621bfbb4edb0dacd949382da7e1ce3d23
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0040f51e0ddb5e70447d24cbaf24e36afab7597952e6610b065b75874b6cd924cf059ad6ecc721a085ab2d69bc93254bc511b91098e90644b2a62170b942829ebfc3ed82c5244c8ac095a28209819dc77f9243a33ea0f8ec42d7afc76d46057f5d6fb80e098798c550124d125eb8eccf469647f808c0c6128cfc9db6b7a32e8d96d6d62dd2ac8c7834dd63f7cbb9a21f61a4a9e3b7ab5db127defa8372d09d27c4245567541ad3d4943ac32c2e12dd1b733ab332c498f4daa0f4b6be231ba4b67fe0ebd46cc2fbb222d26c36ddd1a2c65965b46418fc79805e1dc36b7d5aeabe51d16188d99270175ea179ae3cc068926720f182ee53f034085af6a80540f48a38