cert1.ptly.com

Issued by R3

About this certificate

This digital certificate with serial number 03:6f:d5:a8:ce:f6:d4:9a:b7:51:f4:74:de:a6:93:53:bd:3b was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cert1.ptly.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6f:d5:a8:ce:f6:d4:9a:b7:51:f4:74:de:a6:93:53:bd:3b
Serial Number (int): 299392202590211634509392731732320533593403
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 78:c0:a5:df:07:61:83:5c:ad:6d:38:09:6c:a9:9e:7f:9b:85:7f:ea
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 41:fe:ac:9b:8f:99:42:89:60:8a:85:eb:50:94:2b:6a:c6:66:05:c6
Fingerprint (sha256): 7b:f6:e5:9b:f0:de:d7:36:ea:78:3f:41:8b:d6:03:9a:a2:f7:be:b5:66:87:bf:45:fe:c2:6f:be:b5:6e:a4:34

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cert1.ptly.com

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cert1.ptly.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ack.org.au
alumnae.qmc.school.nz
alumni.kilvington.vic.edu.au
benniesconnect.com.au
cert1.ptly.com
kog.kambala.nsw.edu.au
okga.com.au
okga.net.au
ormistoncollegealumni.com.au
woundsaustralia.com.au
www.benniesconnect.com.au

Other certificates including the domain name ptly.com

(limited to 100 certificates)
wcobu.com.au
ptlycert7.ptly.com
eu.ptly.com
ptlycert15.ptly.com
ais-alumni.be
ais-alumni.be
ap.ptly.com
ptlycert3.ptly.com
ptlycert9.ptly.com
ais-alumni.be
thebluecoatoldscholars.co.uk
hutchins.ptly.com
ptlycert18.ptly.com
maristevents.ptly.com
maristevents.ptly.com
ptlycert7.ptly.com
eu.ptly.com
*.ptly.com
ap.ptly.com
tocalalumni.ptly.com
hutchins.ptly.com
ptlycert16.ptly.com
ptlycert5.ptly.com
ptlycert16.ptly.com
ptlycert9.ptly.com
ptlycert15.ptly.com
eu.ptly.com
eubeta.ptly.com
ptlycert2.ptly.com
*.ptly.com
ptlycert4.ptly.com
ptlycert18.ptly.com
ais-alumni.be
tocalalumni.ptly.com
ais-alumni.be
lowtherhall.ptly.com
ptlycert15.ptly.com
*.ptly.com
ap.ptly.com
demo.ptly.com
ptlycert2.ptly.com
ap.ptly.com
cert0.ptly.com
cert4.ptly.com
ais-alumni.be
maristevents.ptly.com
asba2017.ptly.com
ptlycert16.ptly.com
ptlycert3.ptly.com
demo.ptly.com
2019asba.ptly.com
ap.ptly.com
cert3.ptly.com
eu.ptly.com
*.ptly.com
ptlycert18.ptly.com
ais-alumni.be
eu.ptly.com
ptlycert8.ptly.com
apbeta.ptly.com
ais-alumni.be
eubeta.ptly.com
maristevents.ptly.com
ptlycert17.ptly.com
ais-alumni.be
eu.ptly.com
ptlycert16.ptly.com
asba2019.ptly.com
ptlycert14.ptly.com
events.loreto.vic.edu.au
ptlycert21.ptly.com
ptlycert1.ptly.uk
ptlycert15.ptly.com
cert1.ptly.com
ap.ptly.com
ptlycert12.ptly.com
ap.ptly.com
emmanuelevents.ptly.com
eu.ptly.com
ptlycert8.ptly.com
ptlycert14.ptly.com
cert0.ptly.com
ptlycert12.ptly.com
myhills.net.au
eu.ptly.com
maristevents.ptly.com
cert1.ptly.com
ptlycert4.ptly.com
ptlycert14.ptly.com
events.loreto.vic.edu.au
ptlycert1.ptly.com
ptly.com
ap.ptly.com
ptlycert7.ptly.com
cert5.ptly.com
cert1.ptly.com
ais-alumni.be
maristevents.ptly.com
internet-alumni.com
cert3.ptly.com

Certificate

The complete raw certificate details for cert1.ptly.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgISA2/VqM721Jq3UfR03qaTU707MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMTAyMzA0NDdaFw0yNDA0MDkyMzA0NDZaMBkxFzAVBgNVBAMT
DmNlcnQxLnB0bHkuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
gHDeja/FfGRKi8YlWwwvF4WAQ3Eltk6+T3JlkDr3sXb3jDCCgi9md4+reUKYmc7D
KG0fCQ9imclaQzZplYIZiwZNzXCniQ7FbBgWjUk9On5PyrU5vewK9Crm0eRDfRP+
Wrhb++Ll/yEQDAUxIO6ChEvDFfOYt44ucj183kEEbygzP7i0mdwEfIubNoxs9PjF
7YHdEDV1zqcxJs6SOiq0oln5l2ewFgBFcTp+peosQ+L+LQBUKTh7rKO54ixSiX5o
DZk0vSxJJRM5IaSXPdKYcFevpcAFMXQECLZrB/DbTL3MjKgtaHkQq+Yy5sE/IIqR
4g4EQpQhEKA1oeZdZoX4AQIDAQABo4IC7DCCAugwDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud
DgQWBBR4wKXfB2GDXK1tOAlsqZ5/m4V/6jAfBgNVHSMEGDAWgBQULrMXt1hWy65Q
CUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9y
My5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3Jn
LzCB9gYDVR0RBIHuMIHrggphY2sub3JnLmF1ghVhbHVtbmFlLnFtYy5zY2hvb2wu
bnqCHGFsdW1uaS5raWx2aW5ndG9uLnZpYy5lZHUuYXWCFWJlbm5pZXNjb25uZWN0
LmNvbS5hdYIOY2VydDEucHRseS5jb22CFmtvZy5rYW1iYWxhLm5zdy5lZHUuYXWC
C29rZ2EuY29tLmF1ggtva2dhLm5ldC5hdYIcb3JtaXN0b25jb2xsZWdlYWx1bW5p
LmNvbS5hdYIWd291bmRzYXVzdHJhbGlhLmNvbS5hdYIZd3d3LmJlbm5pZXNjb25u
ZWN0LmNvbS5hdTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQIGCisGAQQB1nkCBAIE
gfMEgfAA7gB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjPXV
72YAAAQDAEYwRAIgRAU3jVwrwvTn8QCZyRvsyqdcv7sqHieSuAvIdE2IA9gCIGjU
KCfKC62mSTgS3SkijxUMVt5NZ5N2vtalo459eRqeAHUAouK/1h7eLy8HoNZObTen
3GVDsMa1LqLat4r4mm31F9gAAAGM9dXvjAAABAMARjBEAiAj2CZFeDUcHUhICrS6
ruyE9TXlDIJhszbOFBAq+a/x4AIgJulfDJh67nFhGysFQO5ZS8BZ7o8xkzmixBec
Rujp5KowDQYJKoZIhvcNAQELBQADggEBACzvDDGqzys0jkk3LD8F/uYrbutR8M97
hV0ZMI6SgKFcUsnJViA2zKJgyKJLxj1FlKI88Myj6jRPEYOkIB12BtL5P5IOt5W7
gA+MLjzHRs0H625tMZ1EQ4S5xR206lhp929Dv9ZjpmwCDauyhvTkAuiKKwUVUsQa
W/tPFsvqasaH8N/mRNOyhx+R2OP6kcnxVRWVY+PyZHLxzijD/HDa0jPNNw/cryg8
f19Nq1PRTInxra4S+9NHLpGsD0fmKH+5JvyGbCEbNlfdqxNTb5oW8MKwGsTsWpeo
GsXddiXRQqMqJhpDy9fmxdGwM1BLgKxOHfW45GJ30nFRj3pGdqOHrjc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHDeja/FfGRKi8YlWwwv
F4WAQ3Eltk6+T3JlkDr3sXb3jDCCgi9md4+reUKYmc7DKG0fCQ9imclaQzZplYIZ
iwZNzXCniQ7FbBgWjUk9On5PyrU5vewK9Crm0eRDfRP+Wrhb++Ll/yEQDAUxIO6C
hEvDFfOYt44ucj183kEEbygzP7i0mdwEfIubNoxs9PjF7YHdEDV1zqcxJs6SOiq0
oln5l2ewFgBFcTp+peosQ+L+LQBUKTh7rKO54ixSiX5oDZk0vSxJJRM5IaSXPdKY
cFevpcAFMXQECLZrB/DbTL3MjKgtaHkQq+Yy5sE/IIqR4g4EQpQhEKA1oeZdZoX4
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299392202590211634509392731732320533593403
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 23:04:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-09 23:04:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cert1.ptly.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16214160986277441325778055392077251204233332776015365080874655779225517738645572096009576567569804144602966706703222352366793864465038103532816172668612681756978391155240123518687915708871333699040018270365528011221201652507397459210713852641968800865675499006995851334009828185979746561509294407779929501955360702410429978028749109645973571555231212625682458580443394403954138671405987920154856713573806419366546431745905385010940932042478903688594388684050981912138059955132914576456910216294990965897636909890026317544542295730433293734011437597487214239612704092266401565049666947085020884659829945560229847889921
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							78c0a5df0761835cad6d38096ca99e7f9b857fea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (238 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ack.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumnae.qmc.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alumni.kilvington.vic.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benniesconnect.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert1.ptly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kog.kambala.nsw.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okga.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okga.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ormistoncollegealumni.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woundsaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benniesconnect.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cf5d5ef66000004030046304402204405378d5c2bc2f4e7f10099c91beccaa75cbfbb2a1e2792b80bc8744d8803d8022068d42827ca0bada6493812dd29228f150c56de4d679376bed6a5a38e7d791a9e007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018cf5d5ef8c0000040300463044022023d8264578351c1d48480ab4baaeec84f535e50c8261b336ce14102af9aff1e0022026e95f0c987aee71611b2b0540ee594bc059ee8f319339a2c4179c46e8e9e4aa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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