vwv.co.za

Issued by R3

About this certificate

This digital certificate with serial number 04:67:8f:08:e6:fc:fd:2e:88:3a:15:39:7f:28:28:1c:0e:bf was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=vwv.co.za

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:67:8f:08:e6:fc:fd:2e:88:3a:15:39:7f:28:28:1c:0e:bf
Serial Number (int): 383688353346667821326534050605869595102911
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: be:82:96:8e:c3:b7:1b:71:9b:b5:cb:f5:cc:b0:de:05:de:cd:d8:33
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 57:71:a9:6f:fd:ab:bf:9c:7b:4c:08:17:ea:1f:44:c1:58:e5:da:a3
Fingerprint (sha256): 86:0b:80:14:a3:27:d7:6c:e7:6a:d4:c3:32:65:f5:92:49:25:70:eb:69:9d:35:0a:a9:d2:21:5e:9b:99:6b:39

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate vwv.co.za

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vwv.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blackfemdom.com
canadalegalforms.com
enrightforcoroner.com
extravirginitea.com
fmcap.vc
healthyhomebaths.com
hospitalforvip.com
illinoisbankruptcyattorneys.com
intelligentfoodchoices.com
jdf.co.in
profit-from-inflation.com
recurvecrossbow.com
redrivercounty.com
rfidexperts.com
sanborncounty.com
sellyourcarhere.com
southernutahwellness.com
stpatricksgala.com
topsummercamps.com
usedlithium.com
vwv.co.za
wakeshma.com
yourchurchsolutions.com

Other certificates including the domain name vwv.co.za

(limited to 100 certificates)

Certificate

The complete raw certificate details for vwv.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGqjCCBZKgAwIBAgISBGePCOb8/S6IOhU5fygoHA6/MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMjUyMjI4NDdaFw0yNDA0MjQyMjI4NDZaMBQxEjAQBgNVBAMT
CXZ3di5jby56YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK+V81Fr
/edfKQXQDkRLKNg2EC/+B4VUVNwOcKA2hfsM/vagaf/YrwWPKyNv6boUXrFcE5QP
M1gewY6LRQx2YzahuCsUhRPzU2kwo7UNWEsMRzI07ibAAQVYoU4UvHNkAVbDH9bz
RKHRUJtdyYXQhhx93sMc0WSHk6km0wn5+zGtlpENgGBRb+9Lqfj+wDTA26Z/gvzL
VmER397qNbaV4Fa05Rp26xiz3tc0OSDkMQ4Uk5CehLMRDv0ysCg9ydEgUjFNkKdm
TMRICYFmg3F9lzw3/29M6GdKZGQl/LX5+5PzsazW4u3FmVD7px0UN+Pie+s0LjWv
fxIFY1olUCKUs20CAwEAAaOCA9YwggPSMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
voKWjsO3G3Gbtcv1zLDeBd7N2DMwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+v
nYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5s
ZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wggHe
BgNVHREEggHVMIIB0YIPYmxhY2tmZW1kb20uY29tghRjYW5hZGFsZWdhbGZvcm1z
LmNvbYIVZW5yaWdodGZvcmNvcm9uZXIuY29tghNleHRyYXZpcmdpbml0ZWEuY29t
gghmbWNhcC52Y4IUaGVhbHRoeWhvbWViYXRocy5jb22CEmhvc3BpdGFsZm9ydmlw
LmNvbYIfaWxsaW5vaXNiYW5rcnVwdGN5YXR0b3JuZXlzLmNvbYIaaW50ZWxsaWdl
bnRmb29kY2hvaWNlcy5jb22CCWpkZi5jby5pboIZcHJvZml0LWZyb20taW5mbGF0
aW9uLmNvbYITcmVjdXJ2ZWNyb3NzYm93LmNvbYIScmVkcml2ZXJjb3VudHkuY29t
gg9yZmlkZXhwZXJ0cy5jb22CEXNhbmJvcm5jb3VudHkuY29tghNzZWxseW91cmNh
cmhlcmUuY29tghhzb3V0aGVybnV0YWh3ZWxsbmVzcy5jb22CEnN0cGF0cmlja3Nn
YWxhLmNvbYISdG9wc3VtbWVyY2FtcHMuY29tgg91c2VkbGl0aGl1bS5jb22CCXZ3
di5jby56YYIMd2FrZXNobWEuY29tghd5b3VyY2h1cmNoc29sdXRpb25zLmNvbTAT
BgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AEiw
42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjUL0XvkAAAQDAEcwRQIh
ALPo/fo3uYptK1yFLOlsmM67SeMnyWPQT23H4yoepkoyAiARGcRcmwooF8TUd/Dk
opbMsUk0OgwFVeZSEe34Zdx5FAB1ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0t
cm/h+tQXAAABjUL0XwIAAAQDAEYwRAIgNcp8hS8OjGK1qiJCFRg/OIEi/sFKUicQ
BM6cWziXoS8CIFhmCeE0TlOLHKtGBbotGH+giMxwEMjOzKkew9iyD34UMA0GCSqG
SIb3DQEBCwUAA4IBAQCL37oQaSCS0DbjWWKSe7uvZnOLvFIUJhqaL8mxuqJriwJ1
T6ekJuN42F/5O381eTa9KoInWEif3Fjx9IlaR61AlwYmhi2NPT4V++71YJ3wOCJA
o1yTHQLHInkmHm4SXwnQcfntHZMwO77uW3DHMuEdGXBGp1dEksoLhazemN6p8wXi
32L1TBxO+ROBvN9PRwl0jS2fxcT2/gWWCBoZA8BGmmtT0lSVNQzGoD5AtQwVLSUu
MwHs9PBb4k2eBrbcZslquH3rBzsY81eyIm9qvEFNcFeytQHnW2dDSGusNOTJS36t
ezUBljb83lSZ+ea/V8kmBK9qjFI7pLWY8zRpC9VB
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5XzUWv9518pBdAOREso
2DYQL/4HhVRU3A5woDaF+wz+9qBp/9ivBY8rI2/puhResVwTlA8zWB7BjotFDHZj
NqG4KxSFE/NTaTCjtQ1YSwxHMjTuJsABBVihThS8c2QBVsMf1vNEodFQm13JhdCG
HH3ewxzRZIeTqSbTCfn7Ma2WkQ2AYFFv70up+P7ANMDbpn+C/MtWYRHf3uo1tpXg
VrTlGnbrGLPe1zQ5IOQxDhSTkJ6EsxEO/TKwKD3J0SBSMU2Qp2ZMxEgJgWaDcX2X
PDf/b0zoZ0pkZCX8tfn7k/OxrNbi7cWZUPunHRQ34+J76zQuNa9/EgVjWiVQIpSz
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383688353346667821326534050605869595102911
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 22:28:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 22:28:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vwv.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22165646697358283133857978310667830393316897118874316739866548804754067018085970391014994797206486345032555221468703412554543919917820618647992924749885041363878211590700775130834592506655173486724456551290275134263516321730546755679743135436626632193767431783952847703093333920715296262249102279254893490058851234078512189720854259873388731231400264267944883358754179932456390846311161199285513631190376828977686437746446317155475337860339936463504774119304812218620113774186843438285896227483805930681376586714613341282864248027267416207562931926815913276206940163767255360805209346802527344073735515219550734168941
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							be82968ec3b71b719bb5cbf5ccb0de05decdd833
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (469 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackfemdom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadalegalforms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enrightforcoroner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extravirginitea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmcap.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyhomebaths.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hospitalforvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'illinoisbankruptcyattorneys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelligentfoodchoices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jdf.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profit-from-inflation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recurvecrossbow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redrivercounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rfidexperts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanborncounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sellyourcarhere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernutahwellness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpatricksgala.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topsummercamps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usedlithium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vwv.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wakeshma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourchurchsolutions.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d42f45ef90000040300473045022100b3e8fdfa37b98a6d2b5c852ce96c98cebb49e327c963d04f6dc7e32a1ea64a3202201119c45c9b0a2817c4d477f0e4a296ccb149343a0c0555e65211edf865dc79140075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d42f45f020000040300463044022035ca7c852f0e8c62b5aa224215183f388122fec14a52271004ce9c5b3897a12f0220586609e1344e538b1cab4605ba2d187fa088cc7010c8cecca91ec3d8b20f7e14
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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