sporty.org.nz

Issued by R3

About this certificate

This digital certificate with serial number 03:5c:e9:d8:4f:1d:2d:94:42:e8:77:6c:55:4f:af:6a:04:b9 was issued on by Let's Encrypt.

With 49 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sporty.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5c:e9:d8:4f:1d:2d:94:42:e8:77:6c:55:4f:af:6a:04:b9
Serial Number (int): 292953668815768488963479842640115123487929
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 08:5a:fc:9b:aa:8b:e3:39:40:c5:42:0d:d8:c7:ad:52:12:e2:6a:3f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a2:7b:14:50:0e:c0:05:ff:f3:b7:bf:73:ba:92:11:07:6f:5a:7c:bd
Fingerprint (sha256): 52:b4:ee:60:b6:b7:f7:5e:e6:03:77:b3:ba:8f:93:6d:3f:e9:3e:2f:b3:c9:bb:99:05:ca:0f:3b:ef:01:3f:12

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.org.nz

49

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aurfc.co.nz
belfastrugby.co.nz
cdcricket.co.nz
centralcitybaseball.org.nz
collegesportsportal.co.nz
edenrugby.co.nz
fastpitch.co.nz
flaxmillbaymotel.co.nz
goodmanrural.co.nz
greenislandbadmintonclub.net.nz
greertonmaristnz.org.nz
havelocknorthbridgeclub.co.nz
hawkesbayrugbyreferees.co.nz
hawkfootball.org.nz
hbcricket.co.nz
hbreds.nz
hbrfu.co.nz
hbru.co.nz
healthyfamiliesinvercargill.org.nz
hillseekers.co.nz
hillseekers4wd.co.nz
huttaikido.org.nz
invercargillnetball.co.nz
magpies.co.nz
maristrugby.org.nz
mgcarclubcanterbury.nz
mtsquashclub.co.nz
nelsonnetball.co.nz
netballsouthcanterbury.co.nz
northshorerugby.co.nz
nzsssc.co.nz
ojcc.org.nz
papakurarugbyleague.co.nz
papatoetoenorth.school.nz
photocard.co.nz
playsoftball.org.nz
rangatiragolf.co.nz
southbridgerugby.com
southlandschoolsport.org.nz
sportslink.org.nz
sportspark.co.nz
sportspay.co.nz
sportsportal.co.nz
sporty.org.nz
tuki.co.nz
turbotouch.co.nz
turbotouch.org.nz
waikatogolf.co.nz
waikatogolf.nz

Other certificates including the domain name sporty.org.nz

(limited to 100 certificates)

Certificate

The complete raw certificate details for sporty.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXnBmc/VQh1k+VM3olEn
9+Xgqx4k3HmOlJdTb4nIIpodQPwEs5IebXDNGMwONziQ8EonR0nF9D1iFfayP2+Y
LWkHg2YmzWFly0U5hMMOUjRkDHiKzm3Tdn7ObniX3sMIDF9SjEfV2cyKKX432Z7F
rqFdiadOqUKfJPJeRVJdtDmCFfHdKGLOVMTMyeML8b4dx2gFE9u3n/+Xyxd8qJSW
i3Fzt4IyfbzLKKINmhAkYAliUgqufFu3rmqjDfLEHRumHjVdbjefFMUjp1Qi/q3H
z/bSmBNkZuVm0c8JkDWLwIKPSDzGc2sPHfcxlcH0dmpj8XjIu6ZFkDRiAAUI4fW5
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292953668815768488963479842640115123487929
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-04 02:10:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-02 02:10:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21394313785463493815547515868795991606529254760317231850746192021946789553809879556562381604371840457398127273814856195914913930577916543090562451277988340476179241143167628874751873657683454349871465741127420019262238135327144883236413736810902474149468129055812803653194215934765878246495097022170415029644588689809980330308359774525937899805689307881894205141814975172646783188632188050777970763197505035263455564358984207377478077224200167384583593533025716754076094934481823842031662366104452480306133325692830226059716144107012652625879725458371755297282412802352191799712946389554895870814392624986624020035937
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							085afc9baa8be33940c5420dd8c7ad5212e26a3f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1020 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belfastrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralcitybaseball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegesportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edenrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastpitch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flaxmillbaymotel.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodmanrural.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenislandbadmintonclub.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greertonmaristnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havelocknorthbridgeclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbayrugbyreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbreds.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbru.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyfamiliesinvercargill.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillseekers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillseekers4wd.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huttaikido.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invercargillnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristrugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgcarclubcanterbury.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballsouthcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northshorerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzsssc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ojcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakurarugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papatoetoenorth.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photocard.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rangatiragolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southbridgerugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandschoolsport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportslink.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportspark.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportspay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbotouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikatogolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikatogolf.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187e4bdb4a3000004030047304502210084fa0822ff69ed742c674307c1a218bfa396f5e1eb13a69eadee514e6b5c5337022000977fc26fa42d66432133214cd572676817c133f1ca61a2f52750eb28fe10e40077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187e4bdb4b10000040300483046022100d08d12025981fd9818f2734e13e251a02bc53b9f69a7f54bfc64ca0ba443f8f20221008ff8359a0f1497db94f97f0a79fcd9b565c6070e72862fb887e15ceec3915d64
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004ad68336f8da7f6baf15984cedbbc70f27ffcb72a315527884d180051c24974a4cc0756ba47479b66bcaec421c5c6bb409708ce06f8766b081e656ad97aded0b93b24bd31fa1b4a0efdf690d81f336bcd234b41e9ad5138bdafc55acd48f1b7f5324310051570c87733fb199ae151f12f022ac0d3eb2d9b0eea57a88e84e2d3d4cd779922b960e8f70778d85d89a5e4ebe3891959df4aa87b9f4e6f09da1a2425fa190bf1d61b346453b49d4dbb70a867666ae136953a8c5a0d614f49750d98d3027e5b1aef1254f9f60e87fa45392325e1f85c9599c802928f1ebb9627de2d297393ce24386c6706ccb060ba528262d9bcd8bc2896cd19cf5dfaee905f7677c