bigteamchallenge.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:1c:03:70:3a:45:90:6f:17:fe:5a:55:4f:87:76:9d:42:72 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bigteamchallenge.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1c:03:70:3a:45:90:6f:17:fe:5a:55:4f:87:76:9d:42:72
Serial Number (int): 357981620403953974582550979948623469298290
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e2:c6:ee:94:c4:a8:97:fc:8b:e6:31:c6:50:91:db:36:5e:41:3c:5d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ae:61:73:41:63:6b:b8:49:b1:62:84:f8:49:b5:0e:50:a7:2b:bb:39
Fingerprint (sha256): 7f:ae:39:4f:93:3b:fb:ad:cb:4a:91:f8:6c:07:30:ed:5d:07:c2:64:b3:5d:15:cf:13:a0:62:cd:a8:11:01:30

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bigteamchallenge.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bigteamchallenge.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bigteamchallenge.com
www.bigteamchallenge.com

Other certificates including the domain name bigteamchallenge.com

(limited to 100 certificates)
admin1120.estore.business
tangleapp.io
status.bigteamchallenge.com
*.bigteamchallenge.com
seehait.me
packages.bigteamchallenge.com
bigteamchallenge.com
webmail.bigteamchallenge.com
bigteamchallenge.com
app.dev.bigteamchallenge.com
*.bigteamchallenge.com
*.bigteamchallenge.com
www.fiasp-udine.it
stats.bigteamchallenge.com
bigteamchallenge.dev
wanderkind.org
packages.bigteamchallenge.com
bigteamchallenge.dev
status.bigteamchallenge.com
*.bigteamchallenge.com
*.bigteamchallenge.com
status.bigteamchallenge.com
*.bigteamchallenge.com
*.bigteamchallenge.com
bigteamchallenge.com
media.bigteamchallenge.com
mtv-gifhorn-ski.de
stats.bigteamchallenge.com
dev.hisaabkitaabapp.com
packages.bigteamchallenge.com
mystepchallenge.co.uk
bigteamchallenge.com
media.bigteamchallenge.com
bigteamchallenge.com
bigteamchallengestatus.co.uk
bigteamchallenge.dev
media.bigteamchallenge.com
waitingtime.io
media.bigteamchallenge.com
bigteamchallenge.com
stats.dev.bigteamchallenge.com
media.bigteamchallenge.com
*.bigteamchallengestatus.co.uk
*.bigteamchallenge.com
stats.dev.bigteamchallenge.com
stats.bigteamchallenge.com
status.bigteamchallenge.com
stats.bigteamchallenge.com
bigteamchallenge.com
stats.bigteamchallenge.com
status.bigteamchallenge.com
stats.dev.bigteamchallenge.com
bigteamchallenge.dev
media.bigteamchallenge.com
media.bigteamchallenge.com
stats.dev.bigteamchallenge.com
sharetime.love
*.bigteamchallenge.com
stats.bigteamchallenge.com
stats.dev.bigteamchallenge.com
queueconsole.bigteamchallenge.com
stats.bigteamchallenge.com
status.bigteamchallenge.com
*.bigteamchallenge.com
stats.bigteamchallenge.com
bigteamchallenge.com
media.bigteamchallenge.com
media.bigteamchallenge.com
dev.bigteamchallenge.com
bigteamchallenge.com
stats.bigteamchallenge.com
media.demo.bigteamchallenge.com
bigteamchallenge.com
stats.bigteamchallenge.com
help.bigteamchallenge.com
status.bigteamchallenge.com
bigteamchallenge.com
*.bigteamchallenge.org
media.bigteamchallenge.com
laff-inc.com
code.bigteamchallenge.com
bigteamchallenge.com
stats.dev.bigteamchallenge.com
sales.maghrebsteel.net
stats.bigteamchallenge.com
stats.dev.bigteamchallenge.com
bigteamchallenge.org
*.bigteamchallenge.com
stats.bigteamchallenge.com
bigteamchallenge.com
bigteamchallenge.com
*.bigteamchallenge.com
status.bigteamchallenge.com
bigteamchallenge.com
stats.bigteamchallenge.com
stats.dev.bigteamchallenge.com
status.bigteamchallenge.com
stats.dev.bigteamchallenge.com
www.prosup.xyz
stats.bigteamchallenge.com

Certificate

The complete raw certificate details for bigteamchallenge.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGejCCBWKgAwIBAgISBBwDcDpFkG8X/lpVT4d2nUJyMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMDYxNTQ3MTFaFw0y
MDAyMDQxNTQ3MTFaMB8xHTAbBgNVBAMTFGJpZ3RlYW1jaGFsbGVuZ2UuY29tMIIC
IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3gUM8sX3Kih68qgExzYPkJWw
UnNf7Jbc/stUmRwr4mJ5F94UVvTWp7w5t8D76PPBvFDGsHPcfLAVWTG0QvVMzkTv
1Rclw4ClIh1tQ7CYBgvRloHottc/5mCA1EgWnDPUj+2Acwsp5Jh0ZftnH1AM083M
WyM5NfoyOlowxzsryKJIyiCtb56zxFEwotYwrqfR+mL90kBxZR+7z958ACJvJ0yZ
JouWd7ERMPXKF17zdO5M45wun9N5m9ldlUdEm7hgP/HgQGW/b2ZY2O9rgJea8I/f
UIOr6j1MlkGev9XW1sP5t86iQrtYUVzPZYwBiVsCCwaASP5JwTC4M+Lb4PVlxrDa
eRWpmdIi65lZDhipC9UbsKMd+pj4BL/P2/pL7m623/MV4FCrueiFLYEu95c9/nXY
tpG8Zk7P1fQtgJgH7+3E1w0Nlwh6ozCau1YjitlRzeFklUIA7dIR/rZCB8UWJsOF
Xuga8ZkG3ZsyUbmCRwMq95+yNnesE8B+pmS49tICqXi3y1gSXFRvIU88VMArRnQe
MKzj7X0upd7HcFyXlVLXoUhS1w+eEgRfaidkJAbP8hwRzBtnB9zn4Gbg3PT5yIBP
e9BUuP0mO031ULDqdUBhVk2dFLaE0wvdMUhb4Y367aSUgJjDWW8TH22OotC0dqia
BNroboGGHjmZJ+1cdJkCAwEAAaOCAoMwggJ/MA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQU4sbulMSol/yL5jHGUJHbNl5BPF0wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3
pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2Nz
cC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2Vy
dC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzA5BgNVHREEMjAwghRiaWd0ZWFtY2hh
bGxlbmdlLmNvbYIYd3d3LmJpZ3RlYW1jaGFsbGVuZ2UuY29tMEwGA1UdIARFMEMw
CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j
cHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYA8JWk
WfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFuQZzmYAAABAMARzBFAiEA
k5aMUkIEdTHS1MSsLhc89iHQWpBbntYfuqAIzu38qjACIDCToGGzGm9s4pINRYqi
8G+wekDsyAye+eKlEhwgBbJzAHYAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklT
Le+LkF4AAAFuQZzmXgAABAMARzBFAiEA2CyUA2a4vvX0WpWd2Qt3hW7uy6Ilf3tw
5XcuHi0Huc0CIGpPz4eUHmkE2hiOeXgqJe5gIl2m41CScc1o3rbt38a1MA0GCSqG
SIb3DQEBCwUAA4IBAQBCm1u3manpKk6i6Bd5LND6+9uvxVRxNAtkWnvdoqm0+tpP
eREGs0FnAs+weIDhKgVk3y0C1WCyJl13I0u2db4ihtAoitxaHWXDbawhFttg1N9n
WaGZvGYSvyFGchHiuaCrDDA/1VnBm2gqkAqX2yG/HIdvIDJeMSJOes7mOZ9qmTWi
jjIofwlSGvG/Q49a90hhlm8+/9KvqMzebzG/5EkX3ycTNtvqCLOfSJFF3/CetQbE
CS+rVf3Wsgs7HeAWsMIlYBGFtLZG+j8XJk79j3BLnMdiIbbSuQdKC06P2j4XKslx
zgFtyv22XBzP0epDemyFLMAGlgN2TjNkwXT8I/DJ
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 357981620403953974582550979948623469298290
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-06 15:47:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-04 15:47:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bigteamchallenge.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 905761469687959818539864806571099850927823393442222127697320341580931598036909949416858589727124807838129880093861899815765050991234761390908771384846262094033794104251893178096276052698959502029375768166631919455418732533468208839714326103042181543999445367741640085991219771702182225981475340856191497874674556476165877394057412247276408442836658253348813301735834061493793994507875372502317829721804142704660764707310982277598519220305382752023669696027650820076998170596282744785818224582502942373660996499605826357136717091090915597449327795246247397677515484510388866050348917877702248098500272510225125470148506726352763098674463653215053354193511536616205588715908636467747654584935855460087932836578885782883059931672082848052899510356487557498413877388198985539371292047288364623764778913289061689191318496369899493265864311182678683555526457232493706219601244546961932346812339867018352515528203115130445594024776361661440413930053607760244616551456349064793766318612960766322769763609388289616875317987602795085753065938688291863165001352168865428555274613926611082737458674205158002317648204785737912363311687630208786342042021201503312187188027056140582685294296329555344180463519051076285596709907037070257456039097497
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e2c6ee94c4a897fc8be631c65091db365e413c5d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigteamchallenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigteamchallenge.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e419ce660000004030047304502210093968c5242047531d2d4c4ac2e173cf621d05a905b9ed61fbaa008ceedfcaa3002203093a061b31a6f6ce2920d458aa2f06fb07a40ecc80c9ef9e2a5121c2005b273007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e419ce65e0000040300473045022100d82c940366b8bef5f45a959dd90b77856eeecba2257f7b70e5772e1e2d07b9cd02206a4fcf87941e6904da188e79782a25ee60225da6e3509271cd68deb6eddfc6b5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00429b5bb799a9e92a4ea2e817792cd0fafbdbafc55471340b645a7bdda2a9b4fada4f791106b3416702cfb07880e12a0564df2d02d560b2265d77234bb675be2286d0288adc5a1d65c36dac2116db60d4df6759a199bc6612bf21467211e2b9a0ab0c303fd559c19b682a900a97db21bf1c876f20325e31224e7acee6399f6a9935a28e32287f09521af1bf438f5af74861966f3effd2afa8ccde6f31bfe44917df271336dbea08b39f489145dff09eb506c4092fab55fdd6b20b3b1de016b0c225601185b4b646fa3f17264efd8f704b9cc76221b6d2b9074a0b4e8fda3e172ac971ce016dcafdb65c1ccfd1ea437a6c852cc0069603764e3364c174fc23f0c9