mainecho.de

Issued by R3

About this certificate

This digital certificate with serial number 03:1a:34:61:ac:1b:7d:54:c7:37:8e:b1:d6:86:9c:bf:ef:b5 was issued on by Let's Encrypt.

With 54 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mainecho.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1a:34:61:ac:1b:7d:54:c7:37:8e:b1:d6:86:9c:bf:ef:b5
Serial Number (int): 270253826334553633826335152772907983171509
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 76:6d:54:3e:b4:81:75:e1:79:71:df:ee:97:4c:99:e6:90:f1:59:2e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ce:a4:58:99:8a:25:8b:12:69:9c:b5:2c:39:9c:ad:a9:c7:98:3d:29
Fingerprint (sha256): 55:80:6e:5f:f6:57:ca:55:36:21:b8:11:3d:19:27:09:19:87:7d:4d:b0:11:a3:48:e1:38:5e:06:7b:9b:6b:9c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mainecho.de

54

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mainecho.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.mainecho.fidion.de
amp.main-echo.de
an.main-echo.de
aschaffenburger-stadtmagazin.de
bote-vom-untermain.de
heimat-shopper-ab.de
heimat-shopper-mil.de
immobilien.main-netz.de
in.main-echo.de
kfz.main-echo.de
leserreisen.main-echo.de
loehrer-blaettle.de
loehrerblaettle.de
lohrer-echo.de
main-echo.tv
main-kick.de
mainecho.de
mainecho.tv
mainkick.de
mainnetz.de
mami-papi-ich.de
mehr-wertheim.de
mehrwertheim.de
partyklicker.de
schlauester-azubi.de
schlauster-azubi.de
trauer.main-netz.de
unser-echo.de
unserecho.de
wertheimer-zeitung.de
www.aschaffenburger-stadtmagazin.de
www.bote-vom-untermain.de
www.heimat-shopper-ab.de
www.heimat-shopper-mil.de
www.leserreisen.main-echo.de
www.loehrer-blaettle.de
www.loehrerblaettle.de
www.lohrer-echo.de
www.main-echo.tv
www.main-netz.de
www.mainecho.de
www.mainecho.tv
www.mainkick.de
www.mainnetz.de
www.mami-papi-ich.de
www.mehr-wertheim.de
www.mehrwertheim.de
www.partyklicker.de
www.schlauester-azubi.de
www.schlauster-azubi.de
www.trauer.main-echo.de
www.unser-echo.de
www.unserecho.de
www.wertheimer-zeitung.de

Other certificates including the domain name mainecho.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for mainecho.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtezorOEmVPRf91SOsbV
b3wpM79NUzAPQ+jEEKUltjaeRBctuDk3EJEXXep9JHXc/eICHW/bS7HppoWgQpYn
zlXX7pANxNhTV1sqYAnskbajSFsatUCvSRqwTl9VOJYZWgvESvCf1Eru49jGHh6T
0VRrbDmw6/m6/9KFTiDODvkOxvzuW7aZHaLUixG47kssfUSvuRGfzJT5Az7aZplb
T5Jc0mh3XdhSpmUNcGFzrIr/0GSb1d10XY2ZtGsgy55C9OitDIoP+RXB3Wb1EJ3I
l5Gz0XJNBr/3nd3F5cTEhMDmuvJtIcFAggtQpDPu/EghnpsneB34ayvTDI2wwMYI
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270253826334553633826335152772907983171509
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-27 22:21:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-26 22:21:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mainecho.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21566878317510200997083486198776754475691836015983055481374682477470415896326020872722612484240690102345412014768144088296129768914084860945463160684244011708783404929858974916972669785722317217189287926586634647017002491887483603608306937799410062169802531697853513368403599731755326629042155170110129906740790381394241508708022904355039222115936098669554496099990527593665219988783921584742863179267578192720512741153348444973296295418927165574782646852989427180499263443787228284273401493145970110445427646114002841656527298235880683631172289030303370728057041552383222758426993221781268172507208885753470045784279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							766d543eb48175e17971dfee974c99e690f1592e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mainecho.fidion.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.main-echo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'an.main-echo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aschaffenburger-stadtmagazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bote-vom-untermain.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heimat-shopper-ab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heimat-shopper-mil.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immobilien.main-netz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'in.main-echo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kfz.main-echo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leserreisen.main-echo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loehrer-blaettle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loehrerblaettle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lohrer-echo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'main-echo.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'main-kick.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainecho.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainecho.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainkick.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainnetz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mami-papi-ich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mehr-wertheim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mehrwertheim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partyklicker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schlauester-azubi.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schlauster-azubi.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trauer.main-netz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unser-echo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unserecho.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wertheimer-zeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aschaffenburger-stadtmagazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bote-vom-untermain.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heimat-shopper-ab.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heimat-shopper-mil.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leserreisen.main-echo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loehrer-blaettle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loehrerblaettle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lohrer-echo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.main-echo.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.main-netz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainecho.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainecho.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainkick.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainnetz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mami-papi-ich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mehr-wertheim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mehrwertheim.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.partyklicker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schlauester-azubi.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schlauster-azubi.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trauer.main-echo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unser-echo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unserecho.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wertheimer-zeitung.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cad951f8c00000403004630440220286bf7c4cbb04d19a68f83f9878cfae9ff24f21a2f4194c44644b152a28a2528022066dffdfda62b20727de8ce0dfcd36ada55f02dae4a198306d6a5f4c97be3e3f7007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018cad951f9e000004030047304502201ededc2986e5b9ca56927a2ffe9291baeb93c65749d8daf67fbcb5c44570587102210087ffea49d286383e6bca03beb42186e4b6dc7f7ab9bfa26e80aa68aed5c79565
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0030f775371eecc280a7324b0ee5abe72ffada96e8e3f4d177a59510cb126756a31216c395508565cbf6598a3764d846b70c5f49eed5adf0706ef5e50d20b723266ca3e21c91b0a79c4a2d2ba01da3f48415f7e50755b5518d2e4eedda8cd846a65d670bf1c208b7cf216098073229dcd427f86c46d77a6a7fc043598dcf26f1627558c467f8f6a7589407b06ad51b573d55229eea7e52895934b5e8de4cfc18a1b67753d770fb927e910da64c08a72577c2f96ab8a4d22d217c57cc8d44f4c8cef0c0e73b7167eab5ac3bf885861527661fd47601784d8e5f2f4d3d92df60d51068f66f773ff73fee0132928b3442f8c16bf1031be1001b8387c6a3e717661dc1