www.etcgroup.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d4:16:1a:40:e9:ad:92:61:9c:92:17:49:b4:ab:e7:87:95 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.etcgroup.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d4:16:1a:40:e9:ad:92:61:9c:92:17:49:b4:ab:e7:87:95
Serial Number (int): 333506098914733378619186362933580896110485
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8e:8c:4c:b9:2b:f6:b2:70:ab:f4:95:38:5d:0a:fa:a7:70:1a:1b:6e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0b:52:7b:50:be:26:7c:5a:40:a4:17:01:13:de:b0:68:cb:b4:35:5c
Fingerprint (sha256): 6f:99:86:c9:eb:0c:10:33:72:2f:50:b1:2f:d8:84:4a:57:92:0e:d5:67:02:9c:b7:51:e1:69:39:14:d8:c6:af

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.etcgroup.org

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.etcgroup.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

etcgroup.org
www-etcgroup-org.aegir3.koumbit.net
www.etcgroup.org

Other certificates including the domain name etcgroup.org

(limited to 100 certificates)
www.etcgroup.org
secure5a903bff44db482cba0000c3.nationbuilder.com
secure5a903bff44db482cba0000c3.nationbuilder.com
secure5a903bff44db482cba0000c3.nationbuilder.com
www.etcgroup.org
secure5a903bff44db482cba0000c3.nationbuilder.com
www.etcgroup.org
www.etcgroup.org
www.etcgroup.org
www.etcgroup.org
www.etcgroup.org
www.etcgroup.org
www.etcgroup.org
secure5a903bff44db482cba0000c3.nationbuilder.com
secure5a903bff44db482cba0000c3.nationbuilder.com
www.etcgroup.org
www.etcgroup.org
secure5a903bff44db482cba0000c3.nationbuilder.com
www.etcgroup.org
www.etcgroup.org
secure5a903bff44db482cba0000c3.nationbuilder.com
secure5a903bff44db482cba0000c3.nationbuilder.com
www.etcgroup.org
secure5a903bff44db482cba0000c3.nationbuilder.com
chat.etcgroup.org
secure5a903bff44db482cba0000c3.nationbuilder.com
www.etcgroup.org

Certificate

The complete raw certificate details for www.etcgroup.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGjDCCBXSgAwIBAgISA9QWGkDprZJhnJIXSbSr54eVMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMjExNTUyMzVaFw0y
MDAyMTkxNTUyMzVaMBsxGTAXBgNVBAMTEHd3dy5ldGNncm91cC5vcmcwggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCosK4w8QYle8ml8j8G8XmdZmdXULJB
yyzeHMAbNuOw0ibOeW8bIBhqXcsdJy/bTx/HRWscfGHg0/sU8fN0Ew80kJuyC6ux
y7oqzUxMheTrGcRmL9ViRBdCxnvc7fEVZnB9dcDy9u7ue9/28unh5t3sYRsxfldz
+bSBOcAamQZkgGm8xovwGlYkImFJ6IoxeXdSF1cfT7WEwkLQ//C63jqfE/V2qI4Z
+g2Zj027ufuqhbWWToVfziv1YuKc4IMkJ+K2mtn+D+bfEuWDeCfU/XJLfsKjHnGq
JQY9lejI2wLambypjD5XJ9CsYfymbvuvssKtSqPC03JdkuArzJt7aqz7hemRunrc
tJt1cz7l/HeZRb/U4l8J+z5b5EhTm9tsbWkZZnuRdtAxjYBG96d9J6si66goX0Vr
EcrDb89TcMDGJgfDOvDlFDWj/fXnEcwJA/hETO+I/Ro1MTvGMptY9YjyKUBkHJ1q
4nSfxBewDoFBsesaVkkoSkkfvnhRQVIUUWGMw6saRN7lEf+s3AzV4fmMcZDlJqEu
7va1P725ZphQ5CRmrZpgm3WcDyPe/zLeuT/WSD0yPz+3oZCA/VggrnjTUmZz1jGQ
OCW/JCrdQd8bxXjefy9nRBCjyh4nGzihrtB4k990nwZohg51Wa578bUClyQDylac
NJap0M9tLr8xLQIDAQABo4ICmTCCApUwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSO
jEy5K/aycKv0lThdCvqncBobbjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu
dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu
dC14My5sZXRzZW5jcnlwdC5vcmcvME4GA1UdEQRHMEWCDGV0Y2dyb3VwLm9yZ4Ij
d3d3LWV0Y2dyb3VwLW9yZy5hZWdpcjMua291bWJpdC5uZXSCEHd3dy5ldGNncm91
cC5vcmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggr
BgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5
AgQCBIH2BIHzAPEAdgDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAA
AW6O4Tj0AAAEAwBHMEUCIQDBe3fmh8Dvoe9Yji2rExd8fFGJndb9KIzCa8D7+XJr
NQIgeNmyKKhUsyCcOVyC9uRIQvBDsqengOYdBKzfIzvnMdYAdwCyHgXMi6LNiiBO
h2b5K7mKJSBna9r6cOeySVMt74uQXgAAAW6O4TjnAAAEAwBIMEYCIQCAnqGit64X
l9MLZLHcFivX0xJhW/3Y7DXQwcJxKfloKgIhALOK9xvat+k0W0iYXiJFkKv55Ruu
V3XiwA1BlIG6cy70MA0GCSqGSIb3DQEBCwUAA4IBAQBj6ItaC7WCHJH4jhKQcWIX
L7z/1rzEyVaZfBiBvAPe787TXVsQsN/yo84RTlLLN+otL5cc+X+aUKqP77B73jmr
uYUhcQtTaqCwQF0XU355e5W0JqXKP4igIYHIg2oLwmI4dlAgonF2U+MQme/wTBvn
iU+XSDhTdlhH4mUHhgk4ibjPqhinMrTEzYoLJhnYViYiAlJSf4GEcSD4lXzuTAJW
E9k8nbq/1kzaoGuE3tkn1guPizHLXK3iG2rTlF5x6wwmSsg0lwnFDQsaT1sfxNt2
EPkmosOKA/H6x3VPy4DaTnanNsA9wmtlmu6rzjZGDvTZnaV7XHCqaK6oNwT8Pu2S
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqLCuMPEGJXvJpfI/BvF5
nWZnV1CyQcss3hzAGzbjsNImznlvGyAYal3LHScv208fx0VrHHxh4NP7FPHzdBMP
NJCbsgurscu6Ks1MTIXk6xnEZi/VYkQXQsZ73O3xFWZwfXXA8vbu7nvf9vLp4ebd
7GEbMX5Xc/m0gTnAGpkGZIBpvMaL8BpWJCJhSeiKMXl3UhdXH0+1hMJC0P/wut46
nxP1dqiOGfoNmY9Nu7n7qoW1lk6FX84r9WLinOCDJCfitprZ/g/m3xLlg3gn1P1y
S37Cox5xqiUGPZXoyNsC2pm8qYw+VyfQrGH8pm77r7LCrUqjwtNyXZLgK8ybe2qs
+4Xpkbp63LSbdXM+5fx3mUW/1OJfCfs+W+RIU5vbbG1pGWZ7kXbQMY2ARvenfSer
IuuoKF9FaxHKw2/PU3DAxiYHwzrw5RQ1o/315xHMCQP4REzviP0aNTE7xjKbWPWI
8ilAZBydauJ0n8QXsA6BQbHrGlZJKEpJH754UUFSFFFhjMOrGkTe5RH/rNwM1eH5
jHGQ5SahLu72tT+9uWaYUOQkZq2aYJt1nA8j3v8y3rk/1kg9Mj8/t6GQgP1YIK54
01Jmc9YxkDglvyQq3UHfG8V43n8vZ0QQo8oeJxs4oa7QeJPfdJ8GaIYOdVmue/G1
ApckA8pWnDSWqdDPbS6/MS0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333506098914733378619186362933580896110485
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-21 15:52:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-19 15:52:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.etcgroup.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 688195802199562437744945682154107788022332229414662852007720467527889897553980994037079551567733684868258279903799195218293220099394169736918290668342964063206320334547017162058006981156655030309593330141172986774661173147151818313141590403094328719066963362349014078261105748209378787104473265402385565741738312462453011273684537459545158185033743228220549705290574875384860149722803256882066268866530059021391450677519710422101229967581335960085707436231597894828789942869001168013713418078227269370429836062223244443734475799660931987960605714518319687951314459183223294142700626923340300451541152435527987183526619933655338175803781483562979533946257048485949627211293912643771180634294460514699093689921988538832124768388743941653145421225255805670270091371160544700996751072196913191046129827988669617689885849032673250514773485083708506311499212034194305000776045597940877357479588635732627115263580584264544001298658950160667165354543162803929100329541309996675534624132021143443296351968067356661916543581149533018048952445525666992117515221151005441338213488288068600926724864184083050983300065537199495369243412954324129438327451077506295377840163569057329191387055849371516037390786093941783634695696717858656225643671853
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8e8c4cb92bf6b270abf495385d0afaa7701a1b6e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etcgroup.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-etcgroup-org.aegir3.koumbit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.etcgroup.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e8ee138f40000040300473045022100c17b77e687c0efa1ef588e2dab13177c7c51899dd6fd288cc26bc0fbf9726b35022078d9b228a854b3209c395c82f6e44842f043b2a7a780e61d04acdf233be731d6007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e8ee138e70000040300483046022100809ea1a2b7ae1797d30b64b1dc162bd7d312615bfdd8ec35d0c1c27129f9682a022100b38af71bdab7e9345b48985e224590abf9e51bae5775e2c00d419481ba732ef4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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