apps.ncagr.gov

Issued by R3

About this certificate

This digital certificate with serial number 04:e6:00:b8:ae:17:bc:2a:97:e6:49:56:b6:7c:ea:0f:63:04 was issued on by Let's Encrypt.

With 52 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=apps.ncagr.gov

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e6:00:b8:ae:17:bc:2a:97:e6:49:56:b6:7c:ea:0f:63:04
Serial Number (int): 426715047032498557038630352211710753858308
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 69:4c:0c:6f:0d:a0:92:73:bd:fd:e5:e1:0b:31:a5:06:bc:ca:b8:bb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 00:d5:d9:f9:92:2f:4f:3b:c6:24:ea:b8:42:dc:b2:0a:ff:e4:e1:20
Fingerprint (sha256): 5a:1c:49:52:fd:a8:3d:ef:5c:91:51:a0:9d:55:72:66:f2:48:79:fa:54:cd:87:31:87:9d:05:ae:8f:fd:42:f8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate apps.ncagr.gov

52

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apps.ncagr.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apps.ncagr.gov
appsdev.ncagr.gov
appsuat.ncagr.gov
boss.ncagr.gov
bossdesk.ncagr.gov
dev.ncmhtd.com
dupontstaterecreationalforest.com
foodsafetytaskforce.nc.gov
gatehouse.ncagr.gov
gottobencfestival.com
intranet.ncagr.gov
iqs.nc.gov
labworks.ncagr.gov
labworkstest.ncagr.gov
lf.ncagr.gov
lfdev.ncagr.gov
mfsdev.ncagr.gov
mountainislandforest.com
ncesf.org
ncfarmfresh.com
ncfooddist.com
ncfoodsafety.com
ncforestactionplan.com
ncforestassessment.com
ncforestservice.gov
ncfreshlink.com
ncfriendsofagriculture.org
nclongleaf.org
ncstatefair.org
resistwildfirenc.org
teamsites.ncagr.gov
test.ncmhtd.com
www.dupontstaterecreationalforest.com
www.foodsafetytaskforce.nc.gov
www.gottobencfestival.com
www.iqs.nc.gov
www.mountainislandforest.com
www.ncesf.org
www.ncfarmfresh.com
www.ncfooddist.com
www.ncfoodsafety.com
www.ncforestactionplan.com
www.ncforestassessment.com
www.ncforestservice.gov
www.ncfreshlink.com
www.ncfriendsofagriculture.org
www.nclongleaf.org
www.ncmhtd.com
www.ncstatefair.org
www.resistwildfirenc.org
wwwdev.ncfooddist.com
wwwuat.ncfooddist.com

Other certificates including the domain name ncagr.gov

(limited to 100 certificates)

Certificate

The complete raw certificate details for apps.ncagr.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvw7EhVbxGJVDai+Gmhr
MeSE2gDUVvxSLV6t/ztH/G3SFhmLA9+UyypCL1/EiXagYATxyXQJ4ZJDWuBphLL9
u4xUQ8xvQ8F5hw7PQezoh91ecpIBYRCRJHt2UrwDf2E5CsKFmiyG9Oubd9IsLq1z
MWoXuqC16HIgFy7JpsggSsUkGTVLuKYWUBb9TyV36fh2VV/l28+wmIkdgJG8E3bM
VlO0idt2xNwc3oBs+2kXU5YV4BgN8GtTYpzNNlCOBL67z33CuUAE2RN628ZfzTyW
eHSf66MpFE7XSx5T1fPIacxlGFTwEvflJR69W+CoZT8+xMV3OFRN80PglaTLs/d8
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 426715047032498557038630352211710753858308
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-28 19:34:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-28 19:34:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apps.ncagr.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24614610779309473638838328534080299733334224848608545593132582090265459748535397741196077394789203828235094806914326467061800696060127400463144689907142688326160287945254453463891785573700733060660361241654460247531356005813472047331670371316749405650408170945741882595316156467411425039898510423537080202784908612240080950009897119955543829803668861826832428114810948943472567497669208433308942503723987059388709608257428767766707443845266051759676531428717571288681816287566145991391626526094853749721078137052692730182482596175989949891641212759815099633036508440880734937565006236846675233307135733298035951107249
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							694c0c6f0da09273bdfde5e10b31a506bccab8bb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appsdev.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appsuat.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boss.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bossdesk.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ncmhtd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dupontstaterecreationalforest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foodsafetytaskforce.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gatehouse.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gottobencfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iqs.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labworks.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labworkstest.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lf.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lfdev.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfsdev.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountainislandforest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncesf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncfarmfresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncfooddist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncfoodsafety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncforestactionplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncforestassessment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncforestservice.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncfreshlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncfriendsofagriculture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nclongleaf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncstatefair.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resistwildfirenc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamsites.ncagr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ncmhtd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dupontstaterecreationalforest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foodsafetytaskforce.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gottobencfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iqs.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountainislandforest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncesf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncfarmfresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncfooddist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncfoodsafety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncforestactionplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncforestassessment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncforestservice.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncfreshlink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncfriendsofagriculture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nclongleaf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncmhtd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncstatefair.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resistwildfirenc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwdev.ncfooddist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwuat.ncfooddist.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018df16d05e2000004030047304502203e8fc10aec55f3952f7a1c4dd76e5489514796f9bcc18fdf5f72899819eca268022100a83e6eb1b3685e6a4eed7f7995981d37898e71a35ea2da1645f6d555b9e409a8007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018df16d063e00000403004730450220493e06369ebc128762454f80719b8f7597f53c720a183461aa4dfb751e80a64c022100fb4ee0b5686f492fbbeb2f0a17ffc0ff725bbb998943fc50a230453555e100a6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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