parishofsaintjohn.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9b:2b:8a:0c:a6:d8:84:1d:20:69:db:62:33:0f:9b:44:f0 was issued on by Let's Encrypt.

With 42 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=parishofsaintjohn.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9b:2b:8a:0c:a6:d8:84:1d:20:69:db:62:33:0f:9b:44:f0
Serial Number (int): 314138498265419229664506439977342215079152
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f9:77:d8:f6:74:5e:10:9b:d7:a3:03:95:77:52:51:1e:1d:41:27:69
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 73:32:68:e9:89:e9:9c:18:96:5f:ad:f3:30:b0:0e:37:85:79:37:50
Fingerprint (sha256): 7a:3f:1d:43:a8:68:30:1b:bc:59:c3:8e:ae:f1:7d:d3:b3:a5:81:c0:5f:a6:ee:dd:ff:94:9e:28:5d:9b:bb:a7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate parishofsaintjohn.org

42

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for parishofsaintjohn.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blessedsacramentwl.org
corpuschristimckeesport.com
holyfamilyjax.com
htcsyork.org
parishofsaintjohn.com
parishofsaintjohn.org
richmondcatholics.org
saintcolumbkilleparish.org
saintraphael.org
scdiocese.org
school.stmatthewtheapostle.com
setoncatholics.org
sjandspp.com
ssaschool.org
stcyrils.org
stelizparish.org
stmaryhespeler.ca
stmarysherman.org
stmatthewtheapostle.com
stpaulchonghasang.org
stpetertutorial.com
umncatholic.org
www.blessedsacramentwl.org
www.corpuschristimckeesport.com
www.holyfamilyjax.com
www.htcsyork.org
www.parishofsaintjohn.com
www.richmondcatholics.org
www.saintcolumbkilleparish.org
www.saintraphael.org
www.scdiocese.org
www.school.stmatthewtheapostle.com
www.setoncatholics.org
www.sjandspp.com
www.ssaschool.org
www.stcyrils.org
www.stelizparish.org
www.stmaryhespeler.ca
www.stmatthewtheapostle.com
www.stpaulchonghasang.org
www.stpetertutorial.com
www.umncatholic.org

Other certificates including the domain name parishofsaintjohn.org

(limited to 100 certificates)
www.stpeterspw.org
www.stpeterspw.org
parishofsaintjohn.org
parishofsaintjohn.org
parishofsaintjohn.org
parishofsaintjohn.org
parishofsaintjohn.org
www.stpeterspw.org
parishofsaintjohn.org
parishofsaintjohn.org
parishofsaintjohn.org
parishofsaintjohn.org
parishofsaintjohn.org
parishofsaintjohn.org
parishofsaintjohn.org
parishofsaintjohn.org
www.stpeterspw.org
parishofsaintjohn.org
parishofsaintjohn.org
parishofsaintjohn.org
parishofsaintjohn.org
parishofsaintjohn.org
parishofsaintjohn.org
parishofsaintjohn.org
parishofsaintjohn.org
parishofsaintjohn.org
parishofsaintjohn.org
parishofsaintjohn.org
parishofsaintjohn.org
parishofsaintjohn.org
parishofsaintjohn.org
parishofsaintjohn.org
parishofsaintjohn.org
parishofsaintjohn.org
parishofsaintjohn.org
parishofsaintjohn.org
parishofsaintjohn.org
parishofsaintjohn.org
parishofsaintjohn.org
parishofsaintjohn.org
parishofsaintjohn.org
parishofsaintjohn.org
parishofsaintjohn.org
www.stpeterspw.org
parishofsaintjohn.org

Certificate

The complete raw certificate details for parishofsaintjohn.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4V+eHcwxiTLVwdat+eLy
SnI6aa2osp9egE3jgjKrg8iUmLsTxzgaT+tzloYSnRIORphHJZVdwAzjUJoJRxYj
VO06pB0urdTEDp1CO0DhCX8mx1OZp58l9/YlErEGoHodjXdasx1xO0U62VgxYE9b
p/Cp0wOfIID+n5i5vkhoed1wyinJkEJyE/L5qMjskOpWSTnHLIaO/wG8S1/WU/0d
XBb5X3ajl0+ZdxQKjUgL83ezojWCx0t5DDNmjkf4b7Sr5NL+cem4WAAKq7ywWDr2
YCjriRXNx9YQAC8SoupgErvoh7jQELtm0mvK8rTZKibdZvxQsMdulQIrQ4Uokzif
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314138498265419229664506439977342215079152
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-24 05:44:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-22 05:44:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'parishofsaintjohn.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28450769434055063226868522964128381474475676130886547799355095629673105817319378634570333253784754684169856307937410900052801465784149553739066125934911784775457162722551440462382122567218356399021907319514953650797200219576156506946760019807461221094305013012258351666422333655491241914928306035076518649900963560720229571296016860288005090070217384954801771190149394084029336007477127476038927870351437129726867197985501469009748012562061432876924775930623351611007313139932192344747152815736206343808895756434852166170171115687625515132200409518191377401837569542160448501394245881223110956239418757865592669642721
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f977d8f6745e109bd7a303957752511e1d412769
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (948 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blessedsacramentwl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpuschristimckeesport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holyfamilyjax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'htcsyork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parishofsaintjohn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parishofsaintjohn.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'richmondcatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintcolumbkilleparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintraphael.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scdiocese.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.stmatthewtheapostle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'setoncatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjandspp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssaschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stcyrils.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stelizparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryhespeler.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmarysherman.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmatthewtheapostle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpaulchonghasang.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpetertutorial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'umncatholic.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blessedsacramentwl.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corpuschristimckeesport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holyfamilyjax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.htcsyork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parishofsaintjohn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.richmondcatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintcolumbkilleparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintraphael.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scdiocese.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.school.stmatthewtheapostle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.setoncatholics.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjandspp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ssaschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stcyrils.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stelizparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryhespeler.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmatthewtheapostle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpaulchonghasang.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stpetertutorial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.umncatholic.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c22b9ccb50000040300463044022032e499402e841bf6b1e128a1f3cf14b1fc6d6f420fba01966dd2a5f490bdc0240220541cbef18662df1fafd804bebf5ebde5cfd9ffb781e33fcccf24ecbbb56c323e007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c22b9cca90000040300473045022100c1136a0e047e4c38a5e757b0684bf1b579df2d2cd6deb1912349c987098702ad0220606db2b5d4d94d924a39b7530d7ff37fec8d0037355da3d13127c3f5bfd6f0ee
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0037aca63e18486f11cc61aef3b9f18d7324729c15c5fcef8fde53b9b7cc983a490c6d009965e89e1bb14b5b5c3aaa2cc8a5049247d3b034fadcf56443719de0dcaed38d37e8967288cfd37ccfb454ac0e7b2cb1dcb53a4910458080e7195af485b0d78649c15b1fc57ef4e580f82d76f38a317c4c193032639946541123d3aad23896d1635067b7b4a3daf8ecc35461bb0e2b1e3946f62eb4bf07da4fa1718b4528c8af18108ef3453adda25d853a7e10bac87a3e46535226529bbc204c12f889ed9b96b604b7aaa693e784749f4596f0b51ba6d20b3eb5f0754d6837240fa8cf2c4d5093f4dacfc46a710eb85db3f13c00c585f2b5795297938aa3c50be92067