sporty.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:12:45:f7:f5:7e:7b:0c:c3:b3:05:1d:56:53:74:cb:f1:39 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sporty.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:12:45:f7:f5:7e:7b:0c:c3:b3:05:1d:56:53:74:cb:f1:39
Serial Number (int): 354667230539862279685429171780957267292473
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5c:c7:6c:f5:a2:cb:92:52:36:4f:93:c2:43:93:04:04:13:95:a9:81
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 78:e7:b1:56:08:02:25:f3:60:de:d7:86:da:90:37:39:3a:92:0d:28
Fingerprint (sha256): 51:0a:e6:e7:ea:d2:a5:96:d3:35:cc:03:c0:74:11:6c:b4:1d:4c:7d:2d:ab:03:28:0b:c4:52:47:77:12:ac:7a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.co.nz

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aafl.co.nz
actc.org.nz
aucklandmarist.co.nz
blenheimgolfclub.co.nz
bluffhillbowls.co.nz
bowlswanganui.org.nz
bsgevents.co.nz
bullernetball.co.nz
bushmultisport.org.nz
canamju.org
clevedoncricketclub.co.nz
clevedonrifleclub.co.nz
gisborneharriers.co.nz
glenburniceskatingclub.co.nz
hastings-central.school.nz
heet.net.nz
lucknow.school.nz
maristfc.co.nz
melrosetargetshooting.co.nz
mtwellingtonrugby.co.nz
mtwswim.co.nz
ncnc.org.nz
nelsoncarclub.co.nz
netballmanawatu.org.nz
northcanterburyrugby.co.nz
northharbourtag.co.nz
nzpca.org
nztua.com
oacnz.org
parkvale.school.nz
pioneerbasketballclub.co.nz
prebbletonnetball.org.nz
primarysportwellington.org.nz
puhoisports.org.nz
scrfu.co.nz
shoreroversnetball.co.nz
southerntack.co.nz
sporty.co.nz
stheliersbowlingclub.co.nz
tabletennis.org.nz
taierirugby.co.nz
technicalharriers.co.nz
terracechb.school.nz
trenthamrifleclub.co.nz
tuakauponyclub.co.nz
ultrarunner.org.nz
volleyballbop.co.nz
wellingtontouch.org.nz
wellsfordsquashclub.co.nz
wmsc.org.nz
wops.co.nz

Other certificates including the domain name sporty.co.nz

(limited to 100 certificates)

Certificate

The complete raw certificate details for sporty.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCn1Cz2jSnFlPahy0XJs
tZTAMbwfXTsjGTnvtTtirI8Hd3IEpyQhLwTOUyHOgxQleqhqWLC5rLAbSCuCW88A
CrapC5FT/Dx0+zi+aCAm/LacdZ/ZuEGhOZGuBbT+FVUe9JQ/SmDKnxwr/Qlxd+SZ
4XRAgdWtmSR7gKkyfnL43hTVBmJCZ0SpsVs6vzxMsGskEri0XGJ44zhv2U1dtM8Q
McVpV985Q8i5vjuVm2bT02YwnVCw7iF2lB4ipjbKA43duj5pn8SM5cdHVuWsWP7t
PbZzSYlR6xqHg+kky0xz31uLnJoKLA3MmPVk6oOMTkqz9vjS5c/2lV1W5xMuw/UI
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 354667230539862279685429171780957267292473
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-12 22:21:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-12 22:21:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25773304080884066385418484940132252153025607638689689770065058879389828215946512165401921784133464399314182310011041342582886020313874660403454652897125291127174146678548523991112610111393034793679401475923706097913936370124924905856820684386713128870589132044002332995764461206219858754838212830998049472921206771285464822262089259147121676882721683817542877486266901330446412709023377932782855686315436820858421394147557487494452976227538266830867242578654575307244459329862041815941261295673764057901662664993032451014396945677474155332553933235009775749858626035654798182030710373184983795710592547479629027674317
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5cc76cf5a2cb9252364f93c2439304041395a981
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1063 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aafl.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandmarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blenheimgolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluffhillbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswanganui.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsgevents.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bullernetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bushmultisport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canamju.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevedoncricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevedonrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gisborneharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenburniceskatingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastings-central.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heet.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucknow.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melrosetargetshooting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtwellingtonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtwswim.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsoncarclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballmanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcanterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northharbourtag.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzpca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nztua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oacnz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkvale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pioneerbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prebbletonnetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primarysportwellington.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puhoisports.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoreroversnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southerntack.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stheliersbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabletennis.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taierirugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technicalharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terracechb.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trenthamrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuakauponyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultrarunner.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volleyballbop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtontouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellsfordsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmsc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wops.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000185a84a0daf000004030047304502200882c432de8bf8480020fe21668275ec73fb7ba403fb97fe846aafe31030f6e50221008743bf158f7077e0cbc294d927873491a18d9928fe1c01b45dd21d0fb897c355007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000185a84a0dd10000040300483046022100e826fa8eb0479487e8b75c61494d5aeb0269cd2a00b369bfb27cca8a2462a9af022100d66ea6291f9a979c686946e1e7d2eeae8ce54e1155b80c2a81082d26f13fff1b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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